Practicing malware analyze after finish the Practical Malware Analysis book
Im just graduated from college and currently an intern, after finishing the book they ask me to find a malware family on malpedia and start analyze a sample of that family. Im only working with malware within the book labs before. What sample should I start with? Thank you very much
Update
Im end up choosing the sample: c012d6850b13e52312b40cff42d444126d137a1ac88f5e77158b5089f6ed25ac
At first it is not packed and im thinking "Thank god" but after looking at the import table and strings within the malware, it may have a lot of components like:
Keylogger
Credential Stealing (browser, mail client)
Process injection
UAC bypass, create backdoor user
Persistence + Defender exclusion
Remote shell
It is the first time I work with malware this complicated, totally different from the labs.
Where or how should I start analyzing the functions with IDA Pro? Thank you in advance