Where can I get info with a view to classify malware based on actions performed by the them. Eg. modifying registry files, copying themselves into other executable's etc.
Tell me more
×
IT Security Stack Exchange is a question and answer site for
IT security professionals. It's 100% free, no registration required.
|
If you mean how to automatically classify malware, this paper on Learning and Classification of Malware Behavior (Meta data) can be of help. |
||||
|
|
|
A good site, formerly known as |
||||
|
|
|
For file and registry accesses, run it in a VM with Process Monitor running or upload it to here. |
|||
|
|
|
enter the Malware name here Threat Expert and you will get a lot of useful info about that Malware |
|||
|
|
|
you can use any API hooking application. Depends on which Ring that you want to hook. Or Viking enough, write your own hook program. |
|||
|
|
