Class 32 Read: Malware Traffic Analysis with Wireshark - taylortommy23/401-Reading-Notes GitHub Wiki

You just started a new job as a Malware Analyst. Explain your job responsibilities to a family member.

  • As a Malware Analyst my responsibility is to dissect harmful software named malware. I study its parts, how it works, where it came from, and what damage it can do. By doing these things I can help keep computer systems safe from these threats.

What are the six steps of the Malware Analysis process? What’s a good mnemonic you can use to remember it?

  • Capture: Get a copy of the malware to study.
  • Build: Create a safe space to test the malware.
  • Install: Set up tools for analyzing the malware.
  • Record: Document the system's condition before running the malware.
  • Commence: Start investigating the malware's actions.
  • Examine: Look into the malware's memory to learn more.
  • Document: Put all findings into a report.

You are tasked with analyzing a new malware sample. Which type of malware analysis would you conduct first and why?

  • Dynamic Malware Analysis: Running the malware in a safe environment to see what it does. This will help me understand its behavior and intentions.

Resource: https://www.spiceworks.com/it-security/data-security/articles/what-is-malware-analysis-definition-types-stages-best-practices/