anￃﾡlisis de malware sin malware - no con name · posted: junio 27, 2012 in diario, general,...

http://windowstips.wordpress.com http://www.equilibrioinestable.com

Upload: others

Post on 30-Jun-2020

10 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

Page 1: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

http://windowstips.wordpress.com

http://www.equilibrioinestable.com

http://windowstips.wordpress.com/

http://www.equilibrioinestable.com/

Page 2: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 3: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 4: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 5: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 6: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 7: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Rep

ort

ing

Revisión inicial

Ejecución

dinámica

Extracción de

Registros

Análisis dinámico

de la información

Reversing e

Ingeniería inversa

Page 8: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 9: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 10: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

¿Tenemos la muestra?

¿Hay tiempo?

¿Se ha realizado algún trabajo ya?

¿Podemos comparar nuestro trabajo?

Page 11: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Rep

ort

ing

Revisión inicial

Qué dicen

Ejecución

dinámica

Extracción de

Registros

Análisis dinámico

de la información

Reversing e

Ingeniería inversa

Page 12: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 13: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 14: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 15: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 16: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 17: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 18: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 19: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

Page 20: Anￃﾡlisis de Malware sin Malware - No cON Name · Posted: junio 27, 2012 in Diario, General, Malware, Noticias, Wetxast, Windows, Wmdows Etiquetas: Flame, microsoft, sysinternals,

http://windowstips.wordpress.com

http://windowstips.wordpress.com/

Metamorphic Malware 1 Metamorphic Malware Research

HTA-T07R Malware Hunting with the Sysinternals Tools · 2020. 2. 14. · Learn about Sysinternals tools and techniques for analyzing and cleaning malware Professional antimalware

Windows Malware Firewall: Remove Windows Malware Firewall

Sysinternals Primer: Gems Aaron Margosis Principal Consultant Microsoft Corporation SIA311

Trabajo Sobre Sysinternals Suite

Attention: Wmdows 95 Users!Attention: Wmdows 95" Users! Notes on ftlnning LucasArts DOs-based games This game was developed before the release ofWmdows 95, and is designed to run in

Detect the undetectable with Sysinternals Sysmon and ... · PDF fileDimitris Margaritis Bsides Athens 2017 24/6/2017 Detect the undetectable with Sysinternals Sysmon and Powershell

Sysinternals Tools by Jigar Lad

Malware & Anti-Malware

Malware, Malware y más Malware ¿Cómo me puedo proteger? “Dijo el cliente web”

Introduction to Mobile Malware. Outline ➢ Introduction ➢ Types of Malware ➢ Malware examples ➢ How Malware Spreads ➢ Prevention ➢ AndroRAT Hands-on Lab

Ch 12: Covert Malware Launching - samsclass.info · Practical Malware Analysis Ch 12: Covert Malware Launching Last revised: 4-10-17. Hiding Malware • Malware used to be visible

Malware Slums: Measurement and Analysis of Malware on ...homepage.cs.uiowa.edu/~mshafiq/files/malware... · Malware Slums: Measurement and Analysis of Malware on Trafﬁc Exchanges

Malware Analysis Analysis.pdf · Definisi Malware Analysis • What is a malware? • Malware (malicious software) ... Malware Sinkronisasi Token • Pelaku: Zeus Banking Trojan •

Sysinternals Primer: TechEd 2014 Edition

FindingPrivilegeEscalations withstrace& SysInternals · 2021. 3. 9. · withstrace& SysInternals @OWASP Stammtisch Stuttgart 06.11.2017 •Diplom Mathematiker (FH) •Administrator

Malware Hunting with the Sysinternals Tools

Indstilling af Windows 10 Win 10.pdf · 2016-04-10 · Download Sysinternals Suite (14.9 MB) Introduction The Sysinternals Troubleshooting Utilities have been rolled up into a single

Intrusion Detection and Malware Analysis - Malware collection

Sample Chapters from Windows Sysinternals Administrator's Reference

Malware Fails Best Bugs in Malware Felix Leder [Malware ... · 1 Malware Fails Best Bugs in Malware Felix Leder [Malware Detection Team] [email protected] 5. desember 2011 malware

Herramientas de Sysinternals

Windows System Response and Interrogation with Sysinternals Tools

THE EVOLUTION OF MALWARE & FUTURE MALWARE MITIGATION

Intrusion Detection and Malware Analysis - Malware collection134.2.173.140/lehre/ws10/ids-malware/12-malware-collection.pdf · Intrusion Detection and Malware Analysis Malware collection

Analisis dan Deteksi Malware Menggunakan Metode Malware

477322-10 Sysinternals Tools You Shouldnt Be Without

Android Malware Exposed-Evolution of Android Malware

Malware and anti-malware (fun with Trojans) - Z. …z.cliffe.schreuders.org/edu/FS/Malware and anti-malware... · 2014-04-02 · Malware and anti-malware (fun with Trojans) ... with

Malware Nilgün Kablan. Malware …………………………………….…….……………………………………………… Geschichte der Malware ……………….…………………………………………………

Process Monitor - FERsigurnost.zemris.fer.hr/ns/malware/2014_15_ProjectMalware... · Web viewProcess Monitor je besplatan alat tvrtke Windows Sysinternals, koja je dio Microsoft TechNet

Improving accuracy of malware detection by …...FFRI, Inc. Background – malware and its detection 4 Increasing malware Targeted Attack (Unknown malware) Malware generators Obfuscators

FindingPrivilegeEscalations withstrace& SysInternals · FindingPrivilegeEscalations withstrace& SysInternals ... 3.Strace. Basics. Basics WhatisPrivilegeEscalation? „Privilegeescalationistheactofexploitingabug,designflaw

HTA-T07R Malware Hunting with the Sysinternals Toolsindex-of.co.uk/Malware/hta-t07r-license-to-kill-malware-hunting-with... · malware Professional antimalware analysis requires years

Вячеслав Кабак "Microsoft Sysinternals-Useful Utilities"