Is Fileless Malware Really Fileless?
Travis Smith has published a post about fileless malware on The State of Security. He notes that this type of malware isn…
Decoding Malicious .vbs Scripts
Guys from Open Analysis have published a video of walking through manually decoding a malicious vbs script that was submitte…
Analyzing Obfuscated Scripts Using Nothing But a Text Editor
NVISO Labs has published a blog post about analysis of some obfuscated scripts that they received. These files were already …
Build malware analysis Windows VMs with Malboxes
Malboxes by GoSecure will build malware analysis Windows VMs for you so that you don’t have to. To learn more about th…
Hunting with YARA rules and ClamAV
Didier Stevens has published a post about using ClamAV with YARA rules for hunting in NVISO Labs blog. He notes that one of …
Simple Static Malware Analyzer
SSMA is a simple malware analyzer written in Python 3. The tool has the following features: Analyze PE file’s header a…
Hardening Win7 x64 on VirtualBox for Malware Analysis
Byte Atlas has published an interesting post on how to create and configure Windows 7 x64 virtual machine in VitrualBox for …
Running Executables on macOS From Memory
Stephanie Archibald from Cylance has written an article about the execution of multi-stage payloads on Mac OS X (up to Sierr…
Analyze the boot records used by BIOS based systems with bootcode_parser
bootcode_parser.py is a Python script designed to perform a quick offline analysis of the boot records used by BIOS based sy…
Principles of Android Malware Detection
In this article, we are dealing with the main principles of the detection and analysis of the Android operating system malwa…
