XWorm Malware Analysis: From Stealthy Persistence to Keyboard Capture
In this video, we perform a full malware analysis of the Xworm CTF sample from CyberDefenders. Step by step, we explore its behavior, persistence mechanisms, and communication with Command & Control (C2) servers. You’ll learn how to analyze malware like a pro using tools such as VirusTotal, AnyRun, and sandbox reports.
What you’ll see in this walkthrough:
How to check the compile timestamp and metadata of the malware.
Identifying legitimate software impersonation (Adobe in this case).
Detecting anti-analysis and sandbox evasion techniques.
Understanding scheduled tasks and privilege escalation.
Inspecting the malware’s configuration, encryption, and C2 servers.
Discovering keylogging functionality and persistence methods.
Examining USB spreading and registry modifications.
Whether you’re a beginner or an aspiring malware analyst, this walkthrough will give you practical insights into malware behavior and how to approach malware CTF labs.
#MalwareAnalysis #CyberDefenders #Keylogger #C2Servers #VirusTotal #AnyRun #CyberSecurity