⚙️

Malware Reverse Engineering

Malware Reverse Engineering

CCDCOE

Malware is a growing threat which causes considerable cost to individuals, companies and institutions. Since basic signature-based antivirus defences are not very useful against recently emerged malware threats or APT attacks, it is essential for an investigator to have the fundamental skill set in order to analyse and mitigate these threats.

ccdcoe.org

Cheat Sheet for Analyzing Malicious Software

This cheat sheet presents tips for analyzing and reverse-engineering malware. It outlines the steps for performing behavioral and code-level analysis of malicious software. To print it, use the one-page PDF version; you can also edit the Word version to customize it for you own needs.

zeltser.com

Cheat Sheet for Analyzing Malicious Software

Malware Analysis Tooling

🤖

AMAaaS

sandboxapk analysisandroidsaas

Any Run

sandboxsaas

CAPEv2

sandboxmalware analysis

Cuckoo Sandbox

sandbox

Cuckoo-modified

sandboxmalware analysis

DetectionLab

detection toolsandboxwindowsactive directory

Gatewatcher Intelligence

intelligence.gatewatcher.com

artifact analysisfile analysismalware analysissaas

💾

GoSecure Responder PRO

www.gosecure.net

malware analysislive memory acquisitionmemory analysis

Hybrid-Analysis

www.hybrid-analysis.com

sandboxsaasmalware analysisartifact analysisurl analysis

Intezer

analyze.intezer.com

saassandboxmalware analysis

Joe Sandbox

www.joesandbox.com

sandboxsaas

🔍

MalConfScan (Volatility)

live memory acquisitionmalware analysis

⚙️

Manalzyer

malware analysissaasstatic analysis framework

Pikker.ee Sandbox (Cuckoo)

sandbox.pikker.ee

sandboxmalware analysissaas

🍎

ProcessMonitor (Objective-See)

objective-see.com

osxmalware analysissystem monitoring

🦠

REMnux

malware analysislinux distribution

⚙️

StringSifter

machine learningmalware analysis

🦠

ThreatFox

threatfox.abuse.ch

saascyber threat intelligenceartifact analysismalware analysisioc scanner

Valkyrie Comodo

valkyrie.comodo.com

saasmalware analysis

🦠

VirusBay

malware exchangereporting

Yomi

yomi.yoroi.company

sandboxsaasmalware analysis