We are discontinuing the Anubis and Wepawet services. Unfortunately, we do not have the resources to maintain these tools and improve them to match an ever-changing malware landscape. The creators of Anubis and Wepawet have moved on and created a company, Lastline, Inc., whose products provide malware analysis and countermeasure capabilities to enterprises of all sizes. You can check Lastline’s so
This webcast introduces you to practical approaches of reverse-engineering malicious software on a Windows system. I cover behavioral and code analysis phases, to make this topic accessible even to individuals with a limited exposure to programming concepts. You'll learn the fundamentals and associated tools to get started with malware analysis. You can view and listen to the recorded version of t
New! MAEC 5.0 now available! Start here if you're new to MAEC About MAEC » Get Started » Now that you have an idea of what MAEC is and how it can be used, learn about tools that support MAEC, suggested practices, and other in-depth documentation. Documentation » Use Cases You can also see examples of common design patterns in MAEC and learn how to create and understand idiomatic MAEC content. Use
Focused Experts Since 2005, Malware Patrol has focused solely on threat intelligence. We monitor the latest malicious campaigns to collect a variety of indicators. These range from malware, ransomware, and phishing to command-and-control systems and DoH servers. Each indicator is verified daily and crucial context, like ATT&CK TTPs, is incorporated. We offer feeds in a variety of formats that inte
Our work protects people and organizations from becoming victims of viruses, spyware, scareware, and other badware. StopBadware is a program housed within the Security Economics Lab at the University of Tulsa; StopBadware is co-directed by Dr. Tyler Moore and Dr. Marie Vasek. StopBadware started as a project of the renowned Berkman Center for Internet & Society at Harvard University, and we spun o
アバストがサポートするのは最新のブラウザです。このウェブページのコンテンツを正しく表示するには、ブラウザをアップデートしてください。
Generic PDF exploit hider. embedPDF.py and goodbye AV detection (01/2010)
Generic PDF exploit hider. embedPDF.py and goodbye AV detection (01/2010) This post is about hiding an evil PDF into a saint PDF. The objective is to embed a pdf into another pdf, and make the reader parse the embedded one without user intervention. If we manage to do this we’ll be able to ‘filter’ the embedded file and hide it through some pdf encoding filters (flatedecode, crypt, etc), that way
My SpiderMonkey is a modified version of Mozilla’s C implementation of JavaScript, with some extra functions to help with malware analysis. Additional functionality: document.write eval(arg) writes arg to a file window.navigate Details in my blog posts here, here, here, here and here. Download source code and binaries (Windows, Linux and OSX): js-1.7.0-mod-c.zip (https) MD5: B14B522E81366D6AAF3B7E
We are discontinuing the Anubis and Wepawet services. Unfortunately, we do not have the resources to maintain these tools and improve them to match an ever-changing malware landscape. The creators of Anubis and Wepawet have created a company, Lastline, Inc., whose products provide malware analysis and countermeasure capabilities to enterprises of all sizes. You can check out the solutions by Lastl
Get protected with MalwareURL Protect your network and users from malicious websites and network traffic by installing MalwareURL in your network devices (routers, firewalls, IPS/IDS). Whether you have a small office or an international infrastructure, MalwareURL will protect against a multitude of up-to-date threats. Even if you have security systems in place, adding MalwareURL will provide signi
This cheat sheet presents tips for analyzing and reverse-engineering malware. It outlines the steps for performing behavioral and code-level analysis of malicious software. To print it, use the one-page PDF version; you can also edit the Word version to customize it for you own needs. Overview of the Malware Analysis ProcessUse automated analysis sandbox tools for an initial assessment of the susp
This cheat sheet outlines tips and tools for analyzing malicious documents, such as Microsoft Office, RTF, and PDF files. To print it, use the one-page PDF version; you can also edit the Word version to customize it for you own needs. General Approach to Document AnalysisExamine the document for anomalies, such as risky tags, scripts, and embedded artifacts.Locate embedded code, such as shellcode,
Automated malware analysis tools, such as analysis sandboxes, save time and help with triage during incident response and forensic investigations. They provide an overview of the specimen's capabilities, so that analysts can decide where to focus their follow-up efforts. Here is a comprehensive listing of free, hosted services perform automated malware analysis: Any.run (free version)Binary Guard
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
