Teacher: https://www.linkedin.com/in/mohamed-fawze-4o4
This course takes you beyond the basics of malware analysis with a practical, hands-on approach. You’ll work with real-world samples including trojans, ransomware, and keyloggers, learning techniques such as unpacking, static and dynamic analysis, and YARA rule creation. It’s ideal for those who already have a foundation and want to start analyzing malware as it appears in real-world scenarios, including active threat implants
Features
- Static Analysis Techniques
- Dynamic Monitoring
- Advanced Reverse Engineering
- Unpacking Procedures
- Multi-Language Analysis
- Stealth Identification
- Payload Reconstruction
Target audiences
- Aspiring Malware Analysts
- Cybersecurity Professionals
- Incident Responders
- Reverse Engineers
Requirements
- Windows 10 Virtual Machine
- FlareVM
- Remnux
- Network Isolation
Curriculum
- 13 Sections
- 13 Lessons
- Lifetime
Expand all sectionsCollapse all sections
- Introduction1
- Analyzing BRBBot Malware1
- Unpacking Emotet Trojan1
- Unpacking Zloader Trojan1
- Dissecting Ardamax Keylogger1
- Analyzing BlackByte Ransomware1
- Analyzing CrossRAT Malware1
- Unpacking MiniDuke Malware1
- Unpacking .NET Malware1
- Analyzing .LNK Malware1
- Unpacking Paradise Ransomware1
- Unpacking TrickBot Trojan1
- Analyzing Havoc Agent & Writing YARA Rules1
FAQs
Automated sandboxes often miss nuances or misclassify Trojans as ransomware because they possess encryption capabilities
Yes, the course provides methods for analyzing DLLs, JAR files, .NET assemblies, and malicious .LNK shortcuts
You will learn to write Yara rules based on unique opcodes and API hashing constants found in frameworks like Havoc.
Specialized techniques for assembly-based threats like MiniDuke are covered, including reconstructing calls when standard analysis fails.
Instructor
