My Notes of the Workshop: Malware Analysis 101

(A workshop given by Suweera De Souza, organized by WeAreCyber )

1.Malware Trends

ransomware, rootkits, exploit kits, stealers, botnets, fileless attacks, rats, air gap, virus, bootkits, worms

stealers: steal email contacts

bootkits: kernel-level/memory level of operating systems

2. Malware Lifecycle

reconnaissance: how they make contact(click some links that shouldn't be clicked)

initial compromise: make itself look like a system process

command&control: send the info back to the server

3. ground rules with malware analysis: change the extension of the files, run them in the VM, etc...

4. How we do malware analysis when we do the exercises

dynamic malware analysis:

process explorer

Microsoft network monitor

use debug tools:

dnSpy

I'll post my analysis result later in July.

the official resource:

https://github.com/0xd0cf11e/WeAreCyber/tree/master/MalwareAnalysis