Full malware analysis of Jigsaw ransomware — static analysis with PEStudio, dynamic analysis with ProcMon and Wireshark, MITRE ATT&CK mapped

This repository contains two static malware analysis labs: one exploring Emotet using VirusTotal and Hybrid Analysis, and another focused on keylogger dissection using REMnux and PEStudio.

Static and dynamic malware analysis of RustyStealer, AsyncRAT, and Babuk in an isolated Windows 11 ARM64 lab environment using PEStudio.

Static analysis of XWorm RAT, A heavily obfuscated .NET backdoor. Includes IOCs, MITRE ATT&CK mapping, and VirusTotal confirmation.

Performed deep static analysis using tools like HxD, Cmder, HashCalc, BinText, XorSearch, FLOSS, UPX, and PEStudio to extract strings, identify file structure, detect obfuscation, and reveal indicators of compromise.

Static analysis of an AgentTesla loader, a .NET steganography based infostealer. Includes IOCs, MITRE ATT&CK mapping and a full loader breakdown.

Comprehensive static malware analysis of suspicious Windows PE samples using REMnux, FLARE-VM, CAPA, PEStudio, FLOSS, PEview, and MITRE ATT&CK mapping.