Is Malware Analysis vs Reverse Engineering?

[Jason Long]

Hello,

A Malware Analyser must know Reverse Engineering? In other word, a Malware Analyser is a Reverse Engineer?

 

Thank you.

[Hayokuma]

Short reply is yes.

 

Of course a Malware Analyser must know more things, not only about reversing.

Edited May 14, 2020 by Hayokuma

[Jason Long]

14 hours ago, Hayokuma said:

Short reply is yes.

 

Of course a Malware Analyser must know more things, not only about reversing.

Thank you.

Thus, to start Malware Analysis, first of all I should start Reverse Engineering then Malware Analysis?

[Hayokuma]

I'm pretty sure there are tutorials about how to start in Malware Analysis.

 

You can focus your reversing learning to that field.

[Jason Long]

2 hours ago, Hayokuma said:

I'm pretty sure there are tutorials about how to start in Malware Analysis.

 

You can focus your reversing learning to that field.

Something like, Reverse Engineering just for Malware Analyse? A Malwere Analyser don't need all aspects of RE?

[Hayokuma]

Making a quick search in google you find out what you need to start with.

Spoiler

https://hshrzd.wordpress.com/how-to-start/

https://blog.malwarebytes.com/security-world/2012/09/so-you-want-to-be-a-malware-analyst/

Not even someone which as been doing reversing for years does know all aspects of RE.

Of course there are people that might know that, but not in all cases, just start doing some basic stuff.

 

RE is an art, you must love it or at least like it otherwise it will become pretty hard for you.

 

There are so many malware types, as much as systems and probably more malware than systems.

 

[CodeExplorer]

Malware Analysis involves Reverse Engineering.
But it also involves other things like running viruses under VirtualBox or other virtual machines since you don't want original computer to get infected.