Here is the complete reference guide to all sessions of ourAdvanced Malware Analysis Training program.

Session 1 -Detection & Removal of Malware's

  1. GMER – Anti-rootkit Tool http://www.gmer.net/
  2. SpyDLLRemover – Tool to Remove Malicious DLLs from Process http://bit.ly/csujQX
  3. SpyBHORemover – Tool to Remove Malicious BHOs from Process http://bit.ly/1zGRN
  4. VirusTotal Scanner – Desktop Tool for Quick Anti-virus Scan http://bit.ly/Lir4Qz
  5. TCPView – http://technet.microsoft.com/en-us/sysinternals/bb897437.aspx
  6. AutoRuns – Manage Startup Entries http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
  7. Demo Video 1 – http://youtu.be/cV4Uln6BGUQ
  8. Demo Video 2 – http://youtu.be/2NORHci6tbw
  9. Demo Video 3 – http://youtu.be/sMtcaXNstw0
  10. Demo Video 4 – http://youtu.be/S-awFK4pNpM

Session 2 -Botnet Analysis Part I

  1. About Botnet – History, Attacks & Countermeasures
  2. Windows Asynchronous Procedure Calls
  3. About Waledac Botnet – http://en.wikipedia.org/wiki/Waledac_botnet
  4. Demo Video – Waledac Botnet Analysis – https://vimeo.com/57755964

Session 3 -Botnet Analysis Part II

  1. Dynamic Taint Analysis and forward Symbolic Execution
  2. Taint Checking – Introduction
  3. Dytan: A Generic Dynamic Taint Analysis Framework
  4. Valgrind – Framework for building dynamic analysis tools
  5. Taint Analysis for Automatic Malware Detection
  6. TTAnalyze: A Tool for Analyzing Malware
  7. JACKSTRAWS: Picking C & C Connections from Bot Traffic
  8. BackTracking Intrusion

Session 4 -Anti-Analysis Techniques

  1. The Ultimate Anti-Debugging Reference
  2. Anti-Debugging – A Developers View
  3. Anti-Debugging with Exceptions
  4. AntiRE – An executable collection of Anti-Reversing Techniques

Session 5 -Reversing Automation

  1. IDAPython in a Nutshell
  2. API Call Tracing – PEfile, PyDbg and IDAPython
  3. pefile – Python module for PE (Portable Executable) Files
  4. Book: Grey Hat Python
  5. Malpimp – Malpimp – Advanced API Tracing Tool

Session 6 -Sandbox Analysis

  1. CWSandbox :: Behavior-based Malware Analysis System
  2. Cuckoo Sandbox – Open source automated malware analysis
  3. Capture BAT – Malware behavioral analysis tool
  4. INetSim – Software for Network Behaviour Analysis of Malwares
  5. Anubis: Online Malware Analysis Service

Session 7 -Memory Forensics

  1. Volatility – Advanced Memory Analysis Framework
  2. Volatility Research Blog
  3. MoonSols Windows Memory Toolkit
  4. PyMal – The Malware Analysis Framework

Session 8 -Introduction to Android

  1. The Android Dalvik Virtual Machine Architecture
  2. Collection of Android Security Resources
  3. ExploitMe Mobile by Security Compass
  4. Open Source database of Android Malware

Session 10 -Reversing & Decrypting Communications of HeartBeat RAT - I

  1. The HeartBeat APT Campaign
  2. Pulsing the HeartBeat APT
  3. HeartBeat APT Targeting Attack

Session 11 -Dissecting the HeartBeat RAT Functionalities - II

  1. Pulsing the HeartBeat APT
  2. HeartBeat APT Targeting Attack