Malware Analysis ST-II

..involves monitoring the live traffic to and from the system
during malware execution

• Network monitoring
  

• Process monitoring
  

• File system monitoring
  

• Registry monitoring

...is an open source, multipurpose tool that helps in monitoring system resources.

• Regshot

• Process Hacker

• FakeNet

• Wireshark

...is a Python script that works in conjunction with
Process Monitor and helps in collecting, analyzing, and reporting runtime indicators of the
malware.

• Norton

• Noriben

• Kaspersky

• Virus Total

..is a packet sniffer that allows you to capture the network traffic.

• Wireshark

• ProcMon

• Regshot

• CFF Explorer

..is a free Linux-based software suite for simulating standard internet services.

• FakeNet

• GlomoSIM

• HaloSIM

• InetSIM

...is a tool used for analyzing the behavior of malware by monitoring system calls made by the executable.

• Regshot

• Sysinternals Suite

• Wireshark

• ProcMon

...is a network analysis tool that provides detailed information about network packets and protocols.

• Fiddler

• Wireshark

• Netcat

• Tcpdump

...is a software that allows you to create a virtual environment for testing malware without affecting the host system.

• VMware

• Sandboxie

• VirtualBox

• QEMU

...is a malware analysis framework that allows for dynamic analysis of malicious software.

• ClamAV

• Malwarebytes

• Spybot

• Cuckoo Sandbox

...is a tool that helps in monitoring file system changes during malware execution.

• FileMon

• ProcMon

• Regshot

• Sandboxie