vvelitkn/Malware-Research-Valuable-Resources

Found resources in my malware researching adventure.

Malware-Research-Valuable-Resources

Hi, I am vvelitkn. To contribute to the community I have decided to bring together in a GitHub repository all I studied valuable sources, PDFs, tweets, rich-content articles and my own articles. I hope you can find what you are looking for, keep updated.

Reverse Engineering Related Sources

• Nightmare - binary exploitation / reverse engineering course based around ctf challenges

PDF

• Malware Analysis Series (MAS) PDFs

• Rootkits and Malware Analysis Presentation PDF

• Fantastic Rootkits: And Where to Find Them (Part 1) | PDF version

• GHOSTWARE AND ROOTKIT DETECTION PDF

• Learning Malware Analysis by Packt Book PDF

• Rootkit Detection Using A Cross-View Clean Boot PDF

• The “Ultimate”Anti-Debugging Reference

• The Art of Unpacking

• Evasion Tactics in Malware from the Inside Out

Youtube Channels

• OALABS

• Dr Josh Stroschein

• Zer0Mem0ry

Understanding Windows/Windows kernel for analysis

• windows kernel internals

• What is DLL Injection?

• Classic DLL injection into the process.

• Syscall Hooking via Extended Feature Enable Register (EFER)

• Windows API Calls directory to determine malicious activity

• Three Ways To Inject Your Code Into Another Process

Malware Analysis Tips and Tricks

• StealthHook - A method for hooking a function without modifying memory protection

• Windows Persistence CheatSheet

• My tweets about anti-sandbox anti-vm anti-debug

• Awesome Malware Analysis

• Anti-Debug Tricks

• Absolute gem GHidra Malware Analysis Tips | source

• Golang IDA plugins make the lives of Go malware reverse engineers easier | source

• Disable ASLR

• Malware Evasion Techniques by Checkpoint

• Great explanation of Process Hollowing

• Al-khaser "Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection."

• Mechanisms to determine if software is running in a VMware virtual machine

• How anti-cheats detect system emulation

• About Command and Control Server (C2)

• ANTI-DISASSEMBLY TECHNIQUES

• How to Analyze Malicious PDF Files

• Most Important Tools for Malware Analysis and Reverse Engineering

• A Complete Malware Analysis Tutorials, Cheatsheet & Tools list for Security Professionals

• Control Flow Unflattening

• Writing detailed YARA rules for malware detection

Malware Analysis Reports

• Follina Exploit Leads to Domain Compromise

• Bumblebee Malware Analysis - Part 1 - Bumblebee Dropper

• Pandora Ransomware Analysis

• Malware-Analysis-Reports by M0H3Y

• dc9308fbde3d3d77cfe16b96f002a08f

• Malware-Analysis-Reports by hakannsoysal

• Malware-Analysis-Reports by An00bRektn

• Dearcry_Malware _Analysis_Report

Websites

• n1ght-w0lf

• chuongdong

Open-Source Malware Samples

• A Proof of Concept ransomware sample - GO -

Tools

• Remote DLL

• Noriben - Portable, Simple, Malware Analysis Sandbox

About malware activities all around the world

• Top 10 Ransomware Attacks

• Top 10 Malware Podcasts

• Top 10 Ransomware Groups

Medium

• Sachiel

• Eli Salem

• 0xM3H51N

IDA Themes

• Dracula

If you have any problems or suggestions just e-mail me: vvelitkn@gmail.com You can fork and contribute this repo, I will consider every valueable sources and merge.