The Ethical Hacker Network - Malware Analysis

Latest Additions

Who's Online

satyr

Newbie

Offline

Posts: 41

Malware Analysis

« on: July 26, 2011, 12:04:48 AM »

Hi all,

I have been reading about Malware Analysis, Ive had some samples for analysis which I used for understanding.

Guys im looking for sources from where I can get malwares for analysis, currently im looking at sites like
MalwareDomainList
OffensiveComputing
Tuts4You

I would love to get a sample and a analysis report of the sample so that i can try all the things mentioned in the analysis. I want to do this till im a little familiar with the basics. After that id love to go ahead and do my own analysis.

Please tell me some forums/sites which anyone here uses for malware analysis.
Please tell me some other methods which I can use, Honeypot I know is one of them.

Thanks all for reading, please share your thoughts on this.


	Logged

dbest

Jr. Member

Offline

Posts: 79

Re: Malware Analysis

« Reply #1 on: July 26, 2011, 01:32:54 AM »

Take a look at some of the challenges hosted by "The Honeynet Project".
http://honeynet.org/challenges

Couple of Scan of the Month challenges (http://old.honeynet.org/scans/index.html) are also related to Malware analysis.
You can start with Scan 32 - Analyze a Malware binary and then proceed to
Scan 33 - Advanced reverse engineering challenge.


	Logged

CISM, CEH, CISA, ISO 27001 LA

MaXe

Hero Member

Offline

Posts: 669

I've just upgraded myself to a cyborg muahahaa!!1

Re: Malware Analysis

« Reply #2 on: July 26, 2011, 11:58:35 AM »

Go to YouTube and search for eLearnSecurity - Malware Analysis. There's 2 good videos there as well, pretty basic, but cool


	Logged

I'm an InterN0T'er

satyr

Newbie

Offline

Posts: 41

Re: Malware Analysis

« Reply #3 on: July 29, 2011, 03:46:40 PM »

Awesome. That helps a lot.
I have been following some forums and looking for analysis articles.

i have heard about Malware Analysts Cookbook ... any other books which someone can recommend ?


	Logged

dbest

Jr. Member

Offline

Posts: 79

Re: Malware Analysis

« Reply #4 on: July 30, 2011, 09:21:22 AM »

Quote from: MaXe on July 26, 2011, 11:58:35 AM

Go to YouTube and search for eLearnSecurity - Malware Analysis. There's 2 good videos there as well, pretty basic, but cool

Those videos do begin with a behavioral analysis of the malware. Wouldn't it be better to start off with a static analysis?


	Logged

CISM, CEH, CISA, ISO 27001 LA

jaso

Newbie

Offline

Posts: 5

Re: Malware Analysis

« Reply #5 on: July 30, 2011, 09:51:21 AM »

Quote from: dbest on July 30, 2011, 09:21:22 AM

Those videos do begin with a behavioral analysis of the malware. Wouldn't it be better to start off with a static analysis?

I think that's a personal preference as long as you're doing behavioral analysis correctly. (isolated system, yadda yadda yadda) I find it easier to leverage my static analysis with my behavioral analysis. I'm sure there are people that cringe at the thought of running malware, but in my mind you're going to end up running it one way or another.


	Logged

3xban

Hero Member

Offline

Posts: 608

Re: Malware Analysis

« Reply #6 on: August 07, 2011, 09:27:26 PM »

Hi Satyr, I am actually in the same boat as you. I am currently going through the cookbook which is pretty decent. Surprisingly, the Kindle version is decent, the only negative was having to hunt down the DVD contents, but they were easily obtainable using an SVN client and following the site's instructions. Another decent piece of the book is the prep. They go over getting a lab setup, some free tools you can use and even going anonymous when you are visiting the bad sites. Using tools such as TOR and proxies.

I will certainly check out the sites posted here, those will be helpful.

Good luck!!