This course on Malware Analysis aims to teach students how to decode and deobfuscate VBScript, analyze various types of malware such as RATs, fake antivirus, Mozi malware, HAFNIUM post-exploitation analysis, Discord malware, Cryptocoin miners, and more. Students will learn skills such as analyzing malware using VBScript, ILSpy, PowerShell, JScript, and .NET, as well as identifying fileless persistence in the registry and analyzing targeted phishing attacks. The teaching method involves hands-on analysis of real-world malware samples. This course is intended for cybersecurity professionals, malware analysts, incident responders, and anyone interested in understanding and combating malware threats.
Overview
Syllabus
MALWARE ANALYSIS - VBScript Decoding & Deobfuscating.
Is THIS a VIRUS? Finding a Remcos RAT - Malware Analysis.
FAKE Antivirus? Malware Analysis of Decoy 'kaspersky.exe'.
Mozi Malware - Finding Breadcrumbs....
HAFNIUM - Post-Exploitation Analysis from Microsoft Exchange.
Discord Malware - "i hacked MYSELF??".
Cryptocoin Miner - Unpeeling Lemon Duck Malware.
VBScript & ILSpy Analysis of a RAT.
Rick & Morty MALWARE!? - sLoad - PowerShell & VBScript.
$2 MILLION DOLLARS STOLEN in Bitcoin/Ethereum - JScript Malware Analysis.
HTA JScript to PowerShell - Novter Malware Analysis.
Information Stealer - Malware Analysis (PowerShell to .NET).
KOVTER Malware Analysis - Fileless Persistence in Registry.
TARGETED Phishing - Fake Outlook Password Harvester.
Taught by
John Hammond
