Malware Analysis

Hey there, fellow nerds! Are you ready to dive into the world of YARA rules and tackle the notorious WannaCry malware sample? Buckle up because this blog post is going to be a mix of fun and seriousness. Let’s get started! First, we'll extract strings from the devious malware using…

RtlProcessFlsData is a Windows API function that is used to retrieve the fiber local storage (FLS) data structure for a given process. FLS is a mechanism in Windows that allows threads within a process to store and retrieve data that is specific to that thread. …

Malicious software, sometimes referred to as malware, is examined and understood through the process of malware analysis. When malware is used by hackers to access computers without authorization, steal valuable information, or harm computer systems, this technique is crucial to recognizing and mitigating cyber risks. There are primarily 2 types…

Background: In the recent month, there is misinformation circulating concerning leaks of private video of Nepali female celebrities. Following the Twitter thread from milann shrestha: I found that the misinformation of private videos of Nepali celebrities being leaked were shared and advertised via some impersonated Facebook pages of major news…

How to set up a lab environment to ensure safety during Malware Analysis. Introduction We’ve all had to deal with some sort of malware in our lives. They usually tend to be rather slithery once they make their way onto the computer or on your network. As a malware analyst, one…

Before we start analyzing malware infections, we should set up an analysis environment. Collected IoCs and malware samples can and will harm your computer, as well as put your data at risk. This analysis environment will host all your analysis tools that will be used to perform static and dynamic…

Ladies and gentlemen, welcome to the first half of Game 7 in the Malware Analysis Championship! In this half, we’re tackling SikoMode’s static analysis and getting warmed up. So, grab your popcorn and get ready for a thrilling experience! Just like a championship team, we’ve got some key players in…

“Three Tools to Rule Them All” will be a series of posts that are related to working with tools created by Didier Stevens, which are: base64dump, zipdump, and oledump. In the series, we will cover how each tool can assist us in analyzing and identifying malicious files. Base64 encoding is…

CONTENT Intro What to Learn Best way to learn it Extra Resources Outro Intro Reverse engineering in cybersecurity refers to the process of analyzing malicious software or other digital artifacts to understand how they operate and to identify potential security vulnerabilities. This can involve decompiling, disassembling, or otherwise reverse engineering…