Forget-me-not: using memory analysis to search for traces of commodity malware

Qakbot, Trickbox, Dridex, and others have become household names for cybersecurity specialists. Commodity malware, as they’ve come to be called, are popping up at alarming rates and have become popular catalysts for all manner of cyberattacks, including those by ransomware operators. It is therefore more vital than ever to understand what commodity malware does once it’s inside your system, and specifically how it becomes a bridge for more devastating malware.

You will also learn:

• Trends connected with commodity malware
• How to find traces of abnormal activity in memory
• How to extract malicious payloads

Learn more about Group-IB Digital Forensics and Malware Analysis