🔍If you’re analyzing malware, forget static AV scanners.

Use 𝐅𝐥𝐚𝐫𝐞𝐕𝐌, 𝐂𝐀𝐏𝐀 & 𝐱𝟔𝟒𝐝𝐛𝐠 for real insights.

Pair with 𝚜𝚢𝚜𝚖𝚘𝚗 + 𝚂𝚒𝚐𝚖𝚊 𝚛𝚞𝚕𝚎𝚜 for tracking execution flow as a pro.

𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 > 𝐆𝐮𝐞𝐬𝐬𝐰𝐨𝐫𝐤.

#Malware #infosec #Bug #CVE

To the malware researchers using Linux: How do you set up your lab? Especially if you are using QEMU? Would appreciate any tips/insights!

I only really found a lot of blog posts of using VBox with Remnux/FlareVM and PFSense/no internet.

Ayer logré después de varios intentos, instalar FlareVM para aprender a analizar malware (en principio para hacer la actividad para aprobar la materia, pero quedará instalado). Lo que más costó fue desinstalar el antivirus de Microsoft.

Ahora hay que instalar el Remnux para aislar la red

Day 6 of #AdventOfCyber all done. Love flarevm. I have a flarevm lab setup on my 12 year old laptop. And it gets the job done but using it on #tryhackme is much faster for learning. #Malware #Malwareanalysis #flarevm

📣 part 4 of installing #Suricata in the #FLAREVM is now live! In this video, we'll explore how to use #fakenet to generate network traffic with network emulation and then generate alert data from #suri 👇

www.youtube.com/watch?v=sc-s...

I checked it out & found that the link didn't lead to any login pages at all Instead, it opens a new tab and initiates a download called SSA.exe. A preliminary look shows it installs Screen Connect on the victim PC. I just set up a new FlareVM & going to spend time looking at it later. 2/3

Rebuilt my cybersecurity lab because I wanted to. I forgot how tedious it was to track down everything i did from flarevm to velociraptor.

But its finally done, my lazy ass can chill and then do stuff later!

Day 17 of Cabby42’s InfoSec Advent Calendar is here!

Today’s pick: FlareVM—a malware analysis and reverse engineering toolkit for Windows.

Learn more: https://buff.ly/3JEM8p4

#InfoSecAdvent #Cybersecurity #Cabby42 #FlareVM

Ayer logré después de varios intentos, instalar FlareVM para aprender a analizar malware (en principio para hacer la actividad para aprobar la materia, pero quedará instalado). Lo que más costó fue desinstalar el antivirus de Microsoft.

Ahora hay que instalar el Remnux para aislar la red […]

TIL you can create Windows Forms UIs in Powershell 🤯

Found in the installer of #FlareVM for #ReverseEngineering. Check it out for other reasons, too :)

https://github.com/mandiant/flare-vm/blob/af1b9e096eb99fe13ba75038d3816d6eeeb724d5/install.ps1#L340

to do list tomorrow:
- install flarevm

🚨 The last video in working with #Suricata in the #FLAREVM is now live! This video introduces a basic rule writing workflow 👇

youtu.be/mWGdJ3YYUQ8

Full playlist (5 videos) -> www.youtube.com/playlist?lis...

flareVMってこのまま使っていいんか？なんかネットワーク構築しないとダメか？