Malware Analysis 2: Detecting Hidden Viruses with Steganography & WinHex 🔍

Malware has become a huge threat to organizations across the globe. Something as simple as opening an email attachment can end up costing a company millions of dollars if the appropriate controls are not in place. Thankfully, there are a plethora of malware analysis tools to help curb these cyber threats. Basic static analysis does not require that the code is actually run. Instead, static analysis examines the file for signs of malicious intent. It can be useful to identify malicious infrastructure, libraries or packed files. However, since static analysis does not actually run the code, sophisticated malware can include malicious runtime behavior that can go undetected. Dynamic malware analysis executes suspected malicious code in a safeenvironment called a sandbox. This closed system enables security professionals to watch the malware in action without the risk of letting it infect their system. This chapter teaches us some useful tools to analyze malware on infected files. 0:00 Intros 17:52 How to start attack box 28:28 Linux File Permissions Explained (ls, chmod) 42:58 [Task 2] Static vs Dynamic Analysis 51:30 [Task 3] Decompiling exe using strings command 1:16:50 [Task 4] Hiding virus in nested zips 1:33:50 [Task 5] Steganography in image 1:52:28 [Task 6] Hiding files in an audio file (Warning loud audio!) 1:57:57 [Task 7] Hide virus in doc file 2:03:32 [Task 8] Fixing corrupted files using Winhex #osint #redteam #malware #virus #rockyou #malwareanalysis #worm #trojan #cybersecurity #firewall