Introduction
Malware samples can be dangerous. CyberCrew resources in this track are for learning methodology — do not download or run untrusted binaries outside a properly isolated lab you control.
Learning objectives
- Operate safely inside isolated analysis environments.
- Combine static and dynamic techniques to form evidence-based conclusions.
- Identify common persistence, packing, and evasion patterns at a practical level.
- Treat samples as hazardous — never execute unknown files on trusted systems.
Roadmap
- 01
Lab hygiene and safety
Isolation, snapshots, network controls, and handling policies for suspicious files.
- 02
Static analysis basics
File triage, strings, headers, hashes, and initial classification.
- 03
Dynamic analysis basics
Controlled execution, behavioral observations, and artifact collection.
- 04
Deeper reverse techniques
Disassembly/debugging workflows and documenting findings for others.
- 05
Reporting for defenders
Indicators, behaviors, and actionable notes for detection teams.
Tools & references
- Isolated VMs / snapshots
- Hashing and triage utilities
- Disassemblers / debuggers (as appropriate to your setup)
- Network capture in a controlled lab