Skip to main content

Posts

Showing posts with the label L:Part2.1 :Malware Analysis Malware Analysis Setting Up The Lab Environment

Part2.1 :Malware Analysis Malware Analysis Setting Up The Lab Environment

 Lab Requirements Before you begin setting up a lab, you need a few components: a physical system running a base operating system of Linux, Windows, or macOS X, and installed with virtualization software (such as VMware or VirtualBox). When analyzing the malware, you will be executing the malware on a Windows-based virtual machine (Windows VM). The advantage of using a virtual machine is that after you finish analyzing the malware, you can revert it to a clean state. Overview Of Lab Architecture Setting Up And Configuring Linux VM $ sudo apt-get update $ sudo apt-get install python-pip $ pip install --upgrade pip $ sudo apt-get install python-magic $ sudo apt-get install upx $ sudo pip install pefile $ sudo apt-get install yara $ sudo pip install yara-python $ sudo apt-get install ssdeep $ sudo apt-get install build-essential libffi-dev python python-dev \ libfuzzy-dev $ sudo apt-get install wireshark $ sudo apt-get install tshark INetSim (https://www.inetsim.org/index.html) is a p...