Malware Analysis - Hybrid Analysis for Malware Assessment

Automatic sandbox systems like Hybrid-Analysis are a great way to speed up malware analysis. We find a file flagged as keylogger that has almost no antivirus detections.

Report: https://www.hybrid-analysis.com/sample/0c46eef8d35e15b87fad288621eb2c8f71fd6fb4ac068a9401411e6fc63cd300/62e0ee20cc00a4781b7710ed

Buy me a coffee: https://ko-fi.com/struppigel
Follow me on Twitter: https://twitter.com/struppigel

00:00 Introduction
00:17 What is Hybrid Analysis, hunting undetected malware
04:28 Sample flagged as keylogger, things I look at first
05:45 File Details: Hashes explained
09:47 File Details: compiler, version info, icon, PortEx visualization
14:40 File Sections
14:58 File Imports: when …

analysis assessment hybrid hybrid analysis malware malware analysis