Organizing malware analysis with Colander: example on Android/WyrmSpy

When I analyze a malware, I keep side by side an ugly text file where I write down my reversing notes. Unfortunately, my notes are usually totally cryptic — even by me — a few weeks later.

This is taken from my old notes on the analysis of a sample of Android/GodFather

To tackle this problem, I have been using Colander now and then for a few months. Colander is an open-source “incident response and knowledge management platform”. It is …

analysis android down file malware malware analysis old reversing sample taken text