TheCyberParadigm

Combining Static and Behavourial Analysis

Mar 28, 2023 · 10 min read · Malware Archive Analysis ·

Static and behavioural analysis have there place in automated analysis particularly when considering sandboxes. These sandboxes often combine static file analysis with monitoring what the sample does when executed. The static approach could be to look for unusual imports or API calls or sections with high levels of …

Static Analysis and Yara

Mar 28, 2023 · 4 min read · Malware Archive Analysis ·

Share on:

The below is aimed at taking static analysis further and how you can use it to create detection rules via yara. Lets look at the sample on Malwr.com, namely https://malwr.com/analysis/ODg3YTA1ZGFlMTY3NDBmNmE5NjZhYzY0ZDg5MGQ4OWU/ uploaded on 01/05/2016 The file details are as follows: FILE NAME gerador.exe FILE SIZE …

Sandbox and Malware

Mar 22, 2023 · 3 min read · Malware Archive Analysis ·

Share on:

Do not get me wrong sandboxes are a very useful tool when it comes to looking at potentially malicious artefacts. Primarily as they offer a quick analysis of samples to give responders a better understanding of the sample with a low risk to the organisation. They are not however a complete assessment of the artefact as …