cuckoo sandbox Automated Malware Analysis

cuckoo is a very famous automated malware analysis sandbox using which you can create your own poor guy's malware analysis lab. so let's see how we achieve the goal, stay with me.

Installation & First Run

As the Focus is not installation so i'll simply not let you suffer the huge article pain for installation, if you feel free to install you are pretty good to go with default installation url and if you feel like lost ping me and i'll help you in setting it as much as i can. okay so i assume you guys have already installed cuckoo and let's first run the cuckoo sandbox and virtual-box as well so that cuckoo can find our guest windows xp.

cuckoo.py

Linux Ransomware Tutorial - How to Do it

This post is strictly for educational purpose, we are not responsible for any action or reaction.

We Already know that world is being annoyed and blackmailed by ransomwares these days by the cyber criminals so here is a quick how to ransomware for those who don't know what it is and how it works .

Get You Arsenals

for the demo purpose we are going to use a public project that is available on github at this URL.

just get the encrypt.c & decrypt.c, then compile it using below command.

gcc -o enrypter encrypt.c -lssl -lcrypto

encrypt.c

Examine Malicious OLE Files - preventing zero day attacks

Microsoft developed OLE technology to combine documents to other objects which hackers also noticed so they tried to use the feature for their own benefit. they tried some micro word 2010 and rich text document also. Let's see how to see a Valid vs a Malicious DOC file.

Are You Ready ?

first create a valid test.doc file which i also created named as Test file.doc i.e micro word document. now its time to perform a quick mimefile analysis on the file, 

emldump.py -d filename