Malware analysis

Malware analysis

Introduction What makes Petya a special ransomware is that it doesn't aim to encrypt each file individually, but aims for low-level disk encryption. In this

Malware analysis

In this article, we will learn what process hallowing is, how is it done, and how we can detect it while performing memory analysis. Process Hallowing It is

Malware analysis

As we know, malware becomes stealthier by somehow achieving persistence on the exploited machine. This helps malware authors to inject/exploit once, and the

Malware analysis

Objective: This exercise covers the techniques to analyze Android malware by using a custom malware sample. The malware, when running on an Android device,

Malware analysis

Memory Analysis has become very useful for malware hunting and investigation purposes. Redline is a tool which is used to analyze the memory samples collecte

Malware analysis

We have covered some basic operations and conditional statements in Part 1. In this article, we will cover some more complex data structures to recognize in

Malware analysis

This article represents a continuing of the malware analysis course we began with the complete structure of PE and ELF earlier. Another important concept whi

Malware analysis

I have decided to come up with an end-to-end malware analysis course and even extend it to memory forensics and detecting APT's. Though this might sound grea

Malware analysis

Introduction to POS malware PoS malware continues to be a serious threat to several industries, from retail to the hotel industry. Respect our previous post,

Malware analysis

Virtual Machines are usually considered a good way to analyze malware as they can provide an isolated environment for the malware to trigger but their action