DeepSec 2010: DIY Malware Analysis with Minibis

[Nytro]

[h=1]DeepSec 2010: DIY Malware Analysis with Minibis by Aaron Kaplan and Christian Wojner[/h]

DYI malware analysis with Minibis

Aaron Kaplan & Christian Wojner, CERT.at

This talk will show people how to use Minibis - the "mini Anubis" - massmalware analyzer. Since most malware is still easily run-time analyzable via virtualization, we can extract a wealth of knowledge via mass malware analysis. Participants will learn how to crunch through large numbers of malware samples and extract any information they seek such as resolved domain names, the top registry changes, etc.

L. Aaron Kaplan and Christian Wojner work at CERT.at, the national CERT of Austria.