Posts on malware-analysis
19 posts on malware-analysis. Notes from public sources and my own test lab.
Think Twice Before Opening That File: A Peek into the Kitchen of Malware Analysis
My journey from a 'zombie' computer to a Red Team Lead taught me one thing: malware analysis is as much about discipline as it is about art. Here's how we dissect those suspicious files safely.
Seeing Behind the Mask: A Late-Night Shift in the Analysis Lab
Signature-based detection is no longer enough. Let's dive into the 'kitchen' of malware analysis to see how we unmask modern, fileless threats using static and dynamic techniques.
Drowning in the Sandbox: Seeing the Unseen in Malware Analysis
Modern malware doesn't just dodge signatures anymore—it hides from the analysis environment itself. Let’s dive into how these "smart" samples detect your VM and what we can do to stay ahead.
Drowning in the Sandbox: The 'Automated Analysis' Myth vs. Reality in Malware Analysis
If you're blindly trusting VirusTotal or automated sandboxes for critical systems, you're not just being lazy—you're potentially tipping off the attackers. Let's dive into why we need to get our hands dirty with manual analysis and proper OPSEC.
What Really Happens When You Open That File? A Peek Into the Malware Analysis Kitchen
A deep dive into the world of malware analysis, from static inspection to dynamic behavioral tracking, shared through the lens of real-world experience and a few 'oops' moments.
The Labyrinth Inside the Code: Pulling an All-Nighter for Binary Analysis
It's 3 AM, your screen is glowing blue, and a suspicious notepad.exe is trying to exfiltrate data. Let's dive into the anatomy of a fileless malware attack and see how we can harden our defenses.
The End of Signature-Based Security: A Journey to the Heart of a File and the Art of Analysis
A deep dive into malware analysis from a Red Teamer's perspective, exploring why static and dynamic analysis are crucial for building robust defensive strategies in today's threat landscape.
The Beast Inside the Box: From Static Analysis to Behavioral Hunting
Checking hashes isn't enough anymore. Sedat dives into the 'kitchen' of malware analysis, explaining why we need to move beyond signatures to understand the character of modern threats.
It’s Not Just the Code Sweating on the Analysis Table: First Steps into the Malware World
Malware analysis is like an autopsy on a patient that is still very much alive and trying to kill you. Here is how we start tearing into the black box.
The Black Widow in the Box: Is a 'Sandbox' Enough for Malware Analysis?
Is a clean VirusTotal report enough? Join me as we dissect malware through static and dynamic analysis, and see why today's threats are smarter than your average sandbox.
A Tale of 'Update.exe': Dissecting Malware in a Lab Environment
Ever wondered if that suspicious binary on your desk is just logging or exfiltrating your entire database? Let's dive into the 'kitchen' work of security and learn how to safely analyze malware.
Opening the Black Box: Anatomy of Malware and Those Critical Decisions in the Analysis Lab
It's 3:15 AM, a high-severity alert pops up, and you're staring at a file named invoice_9928.pdf.exe. Join me as I walk through a digital autopsy of a 'Fully Undetectable' threat in a controlled sandbox environment.