Class 32 Read: Malware Traffic Analysis with Wireshark - taylortommy23/401-Reading-Notes GitHub Wiki
You just started a new job as a Malware Analyst. Explain your job responsibilities to a family member.
- As a Malware Analyst my responsibility is to dissect harmful software named malware. I study its parts, how it works, where it came from, and what damage it can do. By doing these things I can help keep computer systems safe from these threats.
What are the six steps of the Malware Analysis process? What’s a good mnemonic you can use to remember it?
- Capture: Get a copy of the malware to study.
- Build: Create a safe space to test the malware.
- Install: Set up tools for analyzing the malware.
- Record: Document the system's condition before running the malware.
- Commence: Start investigating the malware's actions.
- Examine: Look into the malware's memory to learn more.
- Document: Put all findings into a report.
You are tasked with analyzing a new malware sample. Which type of malware analysis would you conduct first and why?
- Dynamic Malware Analysis: Running the malware in a safe environment to see what it does. This will help me understand its behavior and intentions.
Resource: https://www.spiceworks.com/it-security/data-security/articles/what-is-malware-analysis-definition-types-stages-best-practices/