Malware Analysis - I need some malware

CyberCop123

I work in digital forensics and also do some incident response. I'm looking to get more into a dedicated IR role and many jobs ask for some malware knowledge. I have some initial triaging and basics stuff, but would like to learn a bit more.

I'd like to ideally download some malware to my VM to start looking at and analysing, to use as a test study.

Is there any Malware Analysts out there that can advise on a good starting point?

I know basic things like looking at :

• Hash value of the malware
• Running through strings
• identifying packer with PeID
• Static vs Dynamic analysis
• Running it and looking at:
  • Ports
  • Processes
  • Autoruns
  • Scheduled tasks
  • Registry changes
  • New Users

But as stated, I need to just tidy my knowledge up and learn a bit more about the actual hands on stuff.

SteveLavoie

I have done a few CBT on Malware analysis and I am at the same point as you. What I am doing is that I redirect all catched malicious email from my company antispam to a special mailbox. It give me a lot of actual hands on stuff.