#Article #MalwareAnalysis #Radare2

📗 Intro to Cutter for Malware Analysis

🌐Article Link

Telegram Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Article #MalwareAnalysis

📗 Defeating Macro Document Static Analysis with Pictures of My Ca

Over the past few weeks I’ve spent some time learning Visual Basic for Applications (VBA), specifically for creating malicious Word documents to act as an initial stager. When taking operational security into consideration and brainstorming ways of evading macro detection, I had the question, how does anti-virus detect a malicious macro?

🌐Article Link

Telegram Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Article #MalwareAnalysis

📗 Anti Analysis using API hashing

Malware authors are always using different tricks and techniques to try and stop malware analysts from analysing their malware. One common technique a malware analyst will do is take a look at the Import Address Table (IAT) once they have unpacked sample and see if the IAT gives any clues as to how the malware may behave.

🌐 Article Link

Telegram Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Misc #Github #MalwareAnalysis

📗MalwareAnalysis101

Some malware samples or suspicious files I found and their reports.

🌐 Project Link

Telegram Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Article #MalwareAnalysis

📗Diving into sandbox-captured malware data

I’m sure at some point you’ve received a report or alert from some entity — US-CERT, DHS, someone on Twitter retweeting a security researcher or an anti-virus company, maybe even your bank or credit union? — about a specific threat actor and the malware they may wield against your organization’s network.

🌐 Article Link

Telegram Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Article #MalwareAnalysis #OSX

📗How to Reverse Malware on macOS Without Getting Infected - Part 1-3

Resources for learning malware analysis and reverse engineering abound for the Windows platform and PE files, but by comparison there’s very little literature or tutorials for those who want to learn specifically about how to reverse macOS malware and macOS malware analysis techniques.

🌐 Artcle Link

Telegram Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Article #MalwareAnalysis #Android

How to analyze mobile malware: a Cabassous/FluBot Case study

This blogpost explains all the steps I took while analyzing the Cabassous/FluBot malware.

🌐 Article Link

Telegram Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Tutorial #MalwareAnalysis

Materials for Windows Malware Analysis training (volume 1) by hasherezade

🌐 Tutorial Link

Telegram Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Article #MalwareAnalysis

Process Ghosting, a new executable image tampering attack

PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file

🌐 Articles Link

Telegram Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Article #MalwareAnalysis #Concepts

MalAPI.io - Interesting APIs For Malware Hunters.

🌐 Website Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Article #MalwareAnalysis

Anti-Disassembly techniques used by malware (a primer) Part 1-2

There are chances that malware authors implement some kind of trolling so that a malware analyst has a hard time figuring out code during static analysis (IDA Pro ?)

🌐 Part1 - 🌐 Part2

Telegram Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Project #MalwareAnalysis

YaraDbg

Is a free web-based Yara debugger to help security analysts to write hunting or detection rules with less effort and more confidence.

🌐 Website

Telegram Channel : @securebyte

Our Public Group : https://t.me/joinchat/8IAKs9HaoGU2NmE0
_

#Article #MalwareAnalysis #Android

Analyzing MSFVenom Android Payload By Kousha

MSFVenom is one of the most popular frameworks to create payloads, shellcodes, etc. I want to analyze a little bit of MSFVenom Android payload.

تحلیل پیلود اندرویدی ساخته شده با فریم ورک MSFVenom توسط کوشا

🌐 Article Link

🔗لینک گروه عمومی بایت امن :
https://t.me/joinchat/8IAKs9HaoGU2NmE0
_