Tag Archives: Malware Research
Over this week a new version of Yara have been released. YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or
Process hacker is one of the leading tool for manipulating processes and services, this is important for monitoring the changes when you are investigating a malicious code. you will need this tool in your sandbox to identify any new process
Security software company Symantec is alerting of a new malware that is using a disassembled malicious file to evade antimalware protection. Cybercriminals have created a hidden .dat files attached to the email with a shortcut used to reassemble the malware.
Cuckoo Sandbox is an open source tool that can be used to reverse malwares , exploits, documents and links. the program is written in Python and running in a virtual environment VirtualBox. the application starts by creating a clean snapshot