https://outofsrvc.github.io/en/categories/malware-analysis/Recent content in Malware-Analysis on P01NTHugoenSun, 22 Mar 2026 10:00:00 +0300https://outofsrvc.github.io/en/workshop/cyber-attack-lifecycle/Fri, 20 Mar 2026 11:00:00 +0300https://outofsrvc.github.io/en/workshop/cyber-attack-lifecycle/<p>Bismillah</p> <p>When engaging with malicious software (malware) that warrants examination, one must understand the mindset of the adversary and the objectives they pursue. Therefore, in this research we examine the attack lifecycle and explain several fundamental concepts in malware development.</p> <p>The attack cycle is divided into three principal stages:</p> <p><img alt="Attack Lifcycle" decoding="async" loading="lazy" src="https://outofsrvc.github.io/assets/img/workshop/lifecycle/lifecycle.png"> <em>Figure (1): Illustration of the attack lifecycle.</em></p> <hr> <h2 id="stage-1-initial-access">Stage 1: Initial Access</h2> <p>This stage focuses on breaching the initial defensive perimeter and gaining a foothold within the target system.</p>https://outofsrvc.github.io/en/workshop/basic-reconnaissance/Sat, 21 Mar 2026 12:00:00 +0300https://outofsrvc.github.io/en/workshop/basic-reconnaissance/<p>Bismillah</p> <p>Whenever we intend to analyze any file, we follow the steps below, irrespective of whether the objective is to determine whether the file is benign or contains malware, or even whether we intend to crack its protection:</p> <h2 id="the-4-stages-of-analysis">The 4 Stages of Analysis</h2> <ol> <li> <p><strong>Basic Static Analysis:</strong> This analysis does not require deep technical expertise, but relies entirely on tools that operate automatically (such as VirusTotal). It reveals indicators that show whether the file is a virus or not.</p>https://outofsrvc.github.io/en/workshop/re-toolkit/Sun, 22 Mar 2026 10:00:00 +0300https://outofsrvc.github.io/en/workshop/re-toolkit/<p>Bismillah</p> <p>Having completed the basic analysis (Basic Analysis), we proceed to the advanced analysis (Advanced Analysis). In this article, we examine the principal disassembler and debugger tools employed to analyze binaries, providing a concise and rapid overview. During hands-on application, these tools will be explored in greater depth and detail.</p> <hr> <h2 id="disassemblers">Disassemblers</h2> <p>These tools are used to read a program without executing it (Static Analysis), analogous to reading a map to identify directions and terrain before commencing a journey.</p>