malware analysis – Computer Security Articles

Jetzt für alle: Per API-Analysetool die SophosLabs-Expertise anzapfen

January 28, 2020 admin malware, malware analysis, security news, threat

Credit to Author: Jörg Schindler| Date: Wed, 04 Dec 2019 08:16:44 +0000

Heute einmal eine Interessante Sache in eigener Sache: Sophos hat diese Woche den Start von SophosLabs Intelix bekannt gegeben. Die Cloud-basierte Threat-Intelligence– und Analyseplattform ermöglicht es Anwendern, sicherere Anwendungen zu entwerfen. Programmierer haben via APIs Zugriff auf die Intelix Plattform, um mit aktuellem Cyber-Bedrohungs-Know-how Dateien, URLs und IP-Adressen zu bewerten. Auf der Plattform aktualisiert und […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/OEe6Goz7ts0″ height=”1″ width=”1″ alt=””/>

MalwareBytes Security

New version of IcedID Trojan uses steganographic payloads

December 3, 2019 admin backdoor, banking Trojan, banking trojans, credential stealing, downloader, hooking browsers, icedid trojan, malware, malware analysis, man-in-the-browser attacks, passwords, stealer, stealer functionality, stealing passwords, stealthy malware, Threat analysis, trickbot, trojans

Credit to Author: Threat Intelligence Team| Date: Tue, 03 Dec 2019 18:06:13 +0000

We take a deep dive into the IcedID Trojan, describing the new payloads of this advanced malware.

Categories:

Threat analysis

Tags: backdoor banking Trojan banking Trojans credential stealing downloader hooking browsers IcedID Trojan malware malware analysis man-in-the-browser attacks passwords stealer stealer functionality stealing passwords stealthy malware trickbot Trojans

MalwareBytes Security

Analyzing a new stealer written in Golang

January 30, 2019 admin GO, Golang, IDAGolangHelper, malware, malware analysis, new malware, programming, programming languages, Threat analysis

Credit to Author: hasherezade| Date: Wed, 30 Jan 2019 17:00:00 +0000

We captured a new information-stealing malware written in Golang (Go). Read up on our analysis of its functionality, as well as the tools researchers can use to unpack malware written in this relatively new programming language.

Categories:

Tags: Go Golang IDAGolangHelper malware analysis new malware programming programming languages threat analysis

(Read more…)

The post Analyzing a new stealer written in Golang appeared first on Malwarebytes Labs.

MalwareBytes Security

Malware analysis: decoding Emotet, part 1

May 25, 2018 admin code variation, emotet, macros, malware, malware analysis, Threat analysis, vba code

Credit to Author: Vishal Thakur| Date: Fri, 25 May 2018 15:00:00 +0000

In the first part of this two-part analysis of Emotet, we look at the VBA code, where you’ll learn how to recognize and discard “dead” code thrown in to complicate the analysis process.

Categories:

Tags: code variation emotet macros malware analysis vba code

(Read more…)

The post Malware analysis: decoding Emotet, part 1 appeared first on Malwarebytes Labs.

MalwareBytes Security

Spartacus ransomware: introduction to a strain of unsophisticated malware

April 30, 2018 admin malware, malware analysis, ransomware, Spartacus, Spartacus ransomware, Threat analysis

Credit to Author: Vasilios Hioureas| Date: Mon, 30 Apr 2018 17:40:09 +0000

Spartacus ransomware is a fairly new variant seen in 2018. We’ll walk you through the malware sample to analyze the code in detail, and help you learn how to get an obfuscated .NET sample into a readable state.

Categories:

Tags: malware analysis ransomware Spartacus Spartacus ransomware

MalwareBytes Security

An in-depth malware analysis of QuantLoader

March 28, 2018 admin backdoor, malware, malware analysis, QuantLoader, QuantLoader Trojan, Threat analysis, Trojan

Credit to Author: Malwarebytes Labs| Date: Wed, 28 Mar 2018 16:00:00 +0000

QuantLoader is a Trojan downloader that has been used in campaigns serving a range of malware, including ransomware, Banking Trojans, and RATs. In this post, we’ll take a high-level look at the campaign flow, as well as a deep dive into how the malware executes.

Categories:

Tags: backdoor malware analysis QuantLoader QuantLoader Trojan trojan

(Read more…)

The post An in-depth malware analysis of QuantLoader appeared first on Malwarebytes Labs.

MalwareBytes Security

A coin miner with a “Heaven’s Gate”

January 17, 2018 admin coin miners, Heaven's Gate, malware, malware analysis, Threat analysis

Credit to Author: hasherezade| Date: Wed, 17 Jan 2018 16:00:00 +0000

The Heaven’s Gate technique has been around since 2009. But now coin miners are using it to maximize their performance in the target architecture.

Categories:

Tags: coin miners Heaven’s Gate malware analysis

(Read more…)

The post A coin miner with a “Heaven’s Gate” appeared first on Malwarebytes Labs.

Kaspersky Security

Enterprise businesses need malware analysts

November 8, 2017 admin #TheSAS2018, APT, Business, malware analysis, SAS, Threat Intelligence

Credit to Author: Nikolay Pankov| Date: Wed, 08 Nov 2017 10:08:26 +0000

Most modern, enterprise-level companies understand the menace of cyberthreats to business. Some of them have tried to solve cybersecurity problems with the help of system administrators and security software, but today, more and more companies have realized the need for in-house experts and even security operations centers (SOCs). One of the reasons more businesses are […]