Analysing A Sample Of A Rogue Antivirus

[Wubi]

Cuckoo eats Win32.FakeAV

Description: In this video you will learn how to analyze a fake Antivirus software using SandBox tool and how attacker selling their fake software and stealing our information for profit.

In this video he is using a tool called Cuckoo SandBox. The cuckoo is open source automated malware analysis system.

Cuckoo generates a handful of different raw data which include:

• Native functions and Windows API call traces
  
• Copies of files created and deleted from the file system
  
• Dump of the memory of the selected process
  
• Screenshots of the desktop during the execution of the malware analysis
  
• Network dump generated by the machine used for the analysis
  

Source : - Automated Malware Analysis | Cuckoo Sandbox

Disclaimer: We are a infosec video aggregator and this video is linked from an external website. The original author may be different from the user re-posting/linking it here. Please do not assume the authors to be same without verifying.

Original Source: Cuckoo eats Win32.FakeAV on Vimeo