welcome back to another video. In this session we are going to talk about setting up the 1
tools in your malware testing lab. 2
I'm assuming that you were successful at setting up your virtual environment either using a Windows 3
7 or a Windows 10 machine. 4
In my case I'm using Windows 7 machine as my virtual environment. 5
And the next step would be to setting up the malware tools in your testing. 6
So how do we go ahead and do it. 7
Well we can either do it one by one like let's say in the later videos if we start working with 8
PDF files then we can download the specific tools that might be required to analyze PDF files. 9
The other way is to use the FLARE VM, which is a tool provided by FireEye. 10
This basically automatically downloads a bunch of security tools onto your virtual machine. 11
It's not a very exhaustive list it's but it still contains a lot of important tools that you can use 12
while we are analyzing malicious malware or malicious files etc.. 13
So how do we go ahead and do that. 14
Here is my virtual 15
Windows 7 environment. You can basically go to github. com/FireEye/ flare-vm and 16
you can go to the top. You can click on clone or download and click on download zip. 17
This will download the zip file on your machine. 18
You can then extractor its components and you'll see that it contains a bunch of powershell scripts that you 19
can use to install all the different tools on your machine. 20
If you scroll down you'll also see that there is an installation instruction that has been mentioned. 21
It's pretty easy to install You don't have to do anything you just have to run these two commands. 22
And to run them you need powershell on your Windows environment. 23
So let's quickly launch powershell. 24
It's better to just run it as an admin so that if there are any higher privileges required and it shouldn't 25
be an issue for our tool. 26
So we go to the directory where all the files are located and all we do is the first pass set the exaction 27
policy. 28
Unrestricted. 29
Yes. 30
And once that is done maybe we'll run the powershell script to begin the installation. 31
So once the installation starts, it will take couple of minutes to have everything set up on your machine. 32
But once the installation is done you'll basically see a folder called FLARE created on your desktop 33
and it we'll have bunch of analysis tools in your environment that are very useful tools. 34
You can see there are few tools for PDF file analysis, there are a few for office file analysis 35
there are Hex Editors, there are disassemblers there are debuggers. 36
All these tools are really handy and we are definitely going to need them in some point or the other 37
in later stages of the video. 38
And if there is something which is not present here, we can obviously go ahead and download them 39
and work as we need. 40
So this was a quick video to tell you about how you can set up all the different analysis tools in your 41
environment. That's all for today. 42
Thanks.