Sydney Harris(zzdh)

Malware Analyst

I am infinitly curious about malware. My methodology, seasoned with curiosity, involves first, understanding how a piece of malware is constructed. This helps set some expectations. If I am analyzing malware to understand payload or gain IOCs(most of the time): Static Analysis > (a)detonate > (b)dump > (c)pesieve > Advance Static analysis would be my basic easy default workflow. If I am analyzing for tradecraft, reporting, curiosity, or the rabbit hole, my methoddology would be peppered with x64dbg, Ghidra, Procmon, System Informer, and many other tools as needed.