In the previous article, we looked at basic dynamic analysis of a NanoCore variant. In this article, we’ll be analyzing a VBA malware which I came across on the ANY.RUN platform. Note: Ensure you have the malware sample placed in a safe environment (preferably, a malware analysis lab setup) before…

In my previous article, we analyzed the famous ransomware, WannaCry which wreaked havoc in 2017. In this article, we’ll be looking at a variant of NanoCore which was found more recently — early 2019. This article will cover just basic dynamic analysis and so, it’s quite short. Note: I highly…

In the previous article, we analyzed an Android malware (DroidDream) for a change. Now, we’re back to Windows malware and a very famous one at that! Many people have heard about the ransomware that we’ll be analyzing today — WannaCry. Unlike my other malware analysis related articles, I’ll be focusing…

All the malware analysis related articles on my blog so far have been PE malware. But malware isn’t restricted to Windows OS. There are malware for Linux, macOS, IoT-related OSes, etc. In this article, I’ll break down an Android malware called DroidDream which was infamous back in 2011. It affected…

In the last article, we rooted a VulnHub machine — DC-1. Moving on to the next machine in the series, we’re going to look at DC-2. The machine is available here. Note: The methodologies and tools that you learn from pentesting are real. Do NOT attempt to try and hack…

This post is one of the many that I’ll be writing on basic pentesting. VulnHub is a fantastic starting point for those who are beginners to pentesting and as such, all the machines that we’ll be hacking into are available as .ova downloads on VulnHub. …

Most malware authors employ string obfuscation techniques to hide important strings from malware analysts. Usually, my approach to deobfuscating these strings would be to either execute the malware sample under a debugger or codify the decoding scheme in a high-level language like Python. These methods work well. Even if the…

Steganography is a well-known concept. It involves hiding secret data inside another carrier file. In general, the carrier is usually an image, video or text file. Unlike encryption, steganography is not very obvious to detect — one cannot judge that steganography was used just by looking at an image or…

The 21st century is the age where information is power. This information comes in various forms of machine data which is generated by a multitude of computerized sources. However, when you face terabytes of information it is difficult to feel powerful, rather it feels like facing an uncontrolled demon. In…