Abstract:
Malware has become a pervasive concern for malware analysts and digital forensics. This research investigates malware forensics to detect, investigate, and analyse malicious software. The research examines the application of digital forensic science to dissect threat vectors, specifically malware, shedding light on their behaviour on computer hard disks and memory. Using various digital forensic tools, memory forensics, and hard disk forensics are performed on an infected Windows 7 OS, followed by static and dynamic analysis of malicious software. Memory samples are analysed using volatility for memory forensics, while disk images are analysed using autopsy for hard disk forensics. The malware's functionality is fully comprehended through meticulous extraction and analysis. A robust framework for malware forensic investigation emerges, facilitating detection, analysis, and understanding of malware behaviour. This research underscores the significance of integrating digital forensics tools and techniques to combat evolving malware threats effectively.
