Set up your own malware analysis lab with VirtualBox, INetSim and Burp - Christophe Tafani-Dereeper
In this post we will set up a virtual lab for malware analysis. We’ll create an isolated virtual network separated from the host OS and from the Internet, in which we’ll setup two victim virtual machines (Ubuntu and Windows 7) as well as an analysis server to mimic common Internet services like HTTP or DNS. Then, we’ll be able to log and analyze the network communications of any Linux or Windows m
MS Office exploit analysis – CVE-2015-1641 – Where security meets innovation
During an incident response on a malicious MS Office document, SEKOIA CERT got access to the payload itself and also the dropper which was presented interesting features. The document was designed to exploit the vulnerability CVE-2015-1641 in order to drop and execute a ransomware called Troldesh. This article explains how we analysed the exploit and the trick used by the author to avoid being det
Fileless Malware – A Behavioural Analysis Of Kovter Persistence - Airbus D&S CyberSecurity blog
Fileless Malware – A Behavioural Analysis Of Kovter Persistence By Andrew Dove on 2016/03/23, 14:53 - Reverse engineering - Permalink Behavioural Analysis Fileless Malware Kovter Background During a recent talk by a representative of MalwareBytes, it was discussed that several modern malware families, notable Poweliks, Phase Bot and Kovter are moving away from the file system and are instead estab
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
A Malware Analyst's Guide to Bitcoin