Welcome

Malware Analysis
What is Malware
Analysis?
Malware Analysis is the practice of
determining and analyzing suspicious
files on endpoints and within
networks using dynamic analysis,
static analysis, or full reverse
engineering.
What are the benefits
of Malware Analysis?
A strong Malware Analysis practice aids
in the analysis, detection, and mitigation
of potential threats. Malware Analysis
can help organizations identify malicious
objects used in advanced, targeted, and
zero-day attacks
Why is Malware Analysis
Important?
Malware Analysis is important
because it helps security
operations teams rapidly detect
and prevent malicious objects
from gaining persistence and
causing destruction within the
organization.
Types of Malware Analysis
1) Static Analysis
2) Dynamic Analysis
3) Reverse engineering
Static Analysis
Static Analysis examines the files for
signs of malicious intent without
executing the program. This form can
also call for manual review by an IT
professional after the initial
examination to conduct further
analysis as to how the malware
interacts with the system.
Dynamic Analysis
Dynamic Analysis relies on a closed system
(known as a sandbox), to launch the
malicious program in a secure
environment and simply watch to see
what it does. The inspection environment
simulates an entire host (including the
CPU, system memory, and all devices) to
continuously observe all the actions
malicious objects can take.
Reverse Engineering
Reverse Engineering malware
involves disassembling (and
sometimes decompiling) a software
program. Through this process,
binary instructions are converted to
code mnemonics (or higher-level
constructs) so that engineers can
look at what the program does and
what systems it impacts.
How can VMware help
with Malware Analysis?
VMware NSX Network Detection
and Response (NDR) offers
advanced malware analysis
capabilities through a full-system
emulation sandbox which shows all
malware interactions within an
operating system,
including evasive behaviors and
deep visibility into all artifacts
traversing the data center using
advanced AI techniques.
VMware also provides on-
premises threat hunting and
incident response solution via
continuous End-Point Detection
Response (EDR).
Any Question?
Thank You