Malware Analysis & Reverse Engineering
Static and dynamic analysis of suspicious files, executables, and scripts to determine their behaviour, capabilities, persistence mechanisms, and indicators of compromise.
Overview
When suspicious files or executables are identified during an investigation or threat hunting activity, malware analysis provides detailed understanding of what the malware does, how it communicates, where it persists, and what indicators can be used for detection. This analysis supports incident response, threat intelligence, and security improvement efforts.
Who This Is For
- Organisations that have discovered suspicious files during incident investigation
- Security teams seeking to understand the capabilities of identified malware
- Companies that need indicators of compromise for detection and monitoring
- Organisations supporting law enforcement or regulatory investigations
What We Analyse
- Executable files and compiled binaries
- Scripts and document-based malware
- Memory forensics and in-memory malware
- Network communication protocols and C2 infrastructure
- Persistence mechanisms
- Encryption and obfuscation techniques
- Payload delivery and exploitation methods
What You Receive
- Malware analysis report with behavioural findings
- Technical indicators of compromise (file hashes, network indicators, registry artefacts)
- Capability assessment and threat characterisation
- Detection and mitigation recommendations