Cybersecurity Practical Malware Analysis & Triage

This is time sensitive

Phase 1

I have a cloud vm for you to work in
Do all the work there
Or
screen recording of everything
why ,how


Phase 2
TCM - structured the two vm environments from course - analysis the malware - i have to login information

https://academy.tcm-sec.com/courses/

setup
Remnux
Flare vm
Inetsim

Then 3 other vm with the av set up of each one

Phase 3
Any 3 av software
1 Macfeee
2 Defender
3 avest


Phase 4
Malware Test samples on the 3 av
Whats the process as it excuses
- what stop it from becoming detected
- What cause it from being detected

test the malware locally in the vm
( how the course tests it malware’s analysis)

this is the last step Upload it to virus total - i need the details section from virus total

Make sure the 3 sample code are different then the other so they are not detected (it is of they they are detected) -


(put the code in a blender) making the code looks different so its not detected then putting some place that it can excuse with out being detected

3 Ways Combing different set of tools and techniques

1 . Put it in some place without it being detected
Then run it again to see if it excuses
(Disk process hollowing)


2 . https://github.com/brentvollebregt/auto-py-to-exe

Py to exe

3 . Writing the code then compiling the code yourself to (Removing all the meta data)

using a Linx cross compiler

Use a tool but instead of running it
compiled it in visual studio but change the code by added random code to change the detection rate

Then Obfuscate It

Then move it back to the linx cross compiler

Then run it



- evasion tool that automates many of the effective techniques.

https://github.com/govolution/avet