Practical and Hands-On Malware Analysis (With Live Demos)

Name: Practical and Hands-On Malware Analysis (With Live Demos)
Rating: 4.5 (17 reviews)

Beginner and Intermediate Course on Malware Analysis

Created byCyberworkforce365.com Llc

Last updated 4/2022

English

What you'll learn

Fundamentals of malware concepts and malware analysis
Set up malware analysis lab to study the malware.
Practice how to conduct static analysis of malware
Practice how to conduct dynamic analysis of malware
Master different techniques that the malware uses to evade detection
Gain experience in working with cutting edge technologies used to analyze malware
Gain mastery in detection of malware agaianst organizations

Course content

5 sections • 20 lectures • 2h 18m total length

Welcome to the Course & About Me1:10
Explore dynamic and static malware analysis techniques with live demos to build foundational knowledge in malware analysis, guided by an experienced instructor.
SneakPeak of Demonstrations Inside Course1:00
Get a sneak peak of live demos inside the course, providing a practical preview of malware analysis demonstrations.
Who is this Course for, Course Summary & Learning Objectives2:40
Learn beginner to intermediate, hands-on malware analysis through reverse engineering, static and dynamic analysis, and safe isolation to identify malware types and mitigate cyber risks.

Main Topics, What is Malware & Categories of Malware9:14
Identify what malware is, its categories and infection vectors, attacker tools, and the goals of malware analysis, then set up a virtualized lab for static and dynamic analysis.
Types of Malware, Malware Infection Vectors & Malware Analysis5:26
Explore malware types, including advanced persistent threats, and learn how APTs pursue long-term objectives with sophisticated tools, while examining trojans and phishing infection vectors and malware analysis to detect indicators.
Why Malware Analysis, Goals of Malware Analysis & What is Reverse Engineering6:35
Explore why malware analysis matters, its goals for understanding infections and defenses, and how reverse engineering reveals malware behavior to strengthen incident response and forensics.
Software Reverse Engineering, Types of Software Reverse Engineering & Securit6:09
Study software reverse engineering through behavioral analysis and code analysis to understand malware behavior and vulnerabilities. Explore how cryptographic algorithms and binary auditing relate to security and anti-malware efforts.
Security-Related Reversing & Reversing in Software Development4:45
Audit software binaries using reversing and reverse engineering to compare open source and proprietary software, explore drm architectures like HLS and DASH, and evaluate interoperability, quality, and robustness.
Low-Level Software3:51
Explore low-level software components like the operating system, compilers, debuggers, and linkers, and examine assembly language that differs by platform and reverse engineering with assemblers and disassemblers.
Low-Level Software(II), Tools Needed & Precautions5:00
Set up a malware analysis lab with virtual machines using VirtualBox hypervisor and Flare VM, using tools like CFF Explorer, Exeinfope, and Gidra, while preserving isolation with host only networks.
Precautions(II) & Environment Setup (SANDBOX)6:05
Set up a sandboxed malware analysis environment with a hypervisor, Windows 10 VM, and Flare VM; enable snapshots and password-protect samples. Disable shared folders and avoid storing valuable data.

Downloading VirtualBox, the Windows VM and the Flare VM package5:37
Set up a virtualized malware analysis lab by downloading and installing VirtualBox, a Windows 10 VM, and the Flare VM from GitHub, then organize your tools.
Installing VirtualBox, Extracting and Importing Windows VM & Importing and S7:38
Install Flare VM and Windows 10 virtual machine, import them into VirtualBox, configure host-only networking, and enable shared folders to prepare the malware analysis lab.
Taking Snapshots & Accessing Shared Flare VM Package8:40
Take a base OS snapshot of the VM, copy flare-vm-master to the VM, rename it flare-vm, install flare vm, and use Windows PowerShell to access the folder.
Installing Flare VM Package5:09
Navigate to the flare-vm directory, unblock and run the install script, set execution policy to unrestricted, and install Flare VM with Boxstarter, noting the VM may restart multiple times.

Precautions, the Tools, Getting String & Hashing18:00
Configure a secure malware analysis lab in a VM, perform static analysis with tools like CFF Explorer and strings, and hash files with PowerShell for VirusTotal checks.
Generating Hashes, Using Virustotal & Using CFF Explorer17:38
Generate file hashes using MD5 and other algorithms, then query VirusTotal to assess malware. Analyze a Windows PE using CFF Explorer to inspect headers, sections, and imports for reverse engineering.

Using Fakenet & Regshot13:36
Demonstrate dynamic malware analysis in a controlled lab using Fakenet and Regshot, with baseline and subsequent snapshots, host-only networking, and Procmon to observe registry and process changes.
Using Regshot(II) & Executing Malware4:28
Detonate malware and observe its behavior, capturing registry changes with regshot II across two snapshots; identify ransomware activity, including a png-disguised trojan triggering file errors.
Using Regshot(III) & Process Monitor6:18
Compare registry snapshots with regshot to reveal malware persistence through added keys, modified values, and deleted files, while using process monitor to trace registry queries and file activities.

Requirements

Basic windows concepts
Basic concepts of software and programming
Basic computer concepts

Description

Attackers use malware as the primary weapon to exploit systems. Organizations across the globe lose millions of dollars through data breaches caused by malware creators. Hiring managers find it challenging to fill in malware positions because most security analysts have not developed malware analysis skills. This course can train you for a career in any anti-virus company worldwide or give you skills to analyze and stop breaches to organizations you work with.

This course is intended for anyone who wants to know how malware analysis and reverse engineering of software is performed.

This course introduces the basic concepts of malware, different types of malware, and the malware analysis process. Before moving on with practical and hands-on malware analysis, students will set up their secured lab for malware analysis. Students will get familiar with the basic techniques of static and dynamic malware analysis and will be allowed to practice all the labs.

Students will learn to analyze malware and understand malware anatomy using various tools and techniques. The course has some hands-on sections that enable students to practice malware analysis in a virtual environment. The system helps set up their virtual lab using VirtualBox. The instructor and lab manual help students complete demos in the last area.

By the end of the course, you'll have solid knowledge that will enable you to analyze most malware programs.

I am looking forward to walking this journey with you and ensuring you gain mastery and expertise in malware analysis.

Who this course is for:

People considering a career (or training) in cyber security
Computer Repairers who clean up infected machines
Anyone interested in learning malware analysis
Security Operations center (SOC) analysts interested in learning malware analysis
Incident responders seeking to learn about malware

Practical and Hands-On Malware Analysis (With Live Demos)

What you'll learn

Explore related topics

Course content

Introduction3 lectures • 5min

Theoretical Section of Course8 lectures • 47min

Downloading and Installation of Tools4 lectures • 27min

Static Analysis Demonstration2 lectures • 36min

Dynamic Analysis Demonstration3 lectures • 24min

Requirements

Description

Who this course is for: