Hello and welcome.
In this video lecture, I really show you how to set up a lab for Melby analysis.
Why do we need to set up a lab in the first place?
Malware can damage your computer if you execute it.
So we need a lab in order to have a safe environment that we can use to analyze and execute environmental.
They also let virtual machines actually is able to be reset to its previous state.
So after analyzing, I see, I think way we can always reset it to his previous state and the previous
state of snapshots.
So we create snapshots before we analyze malware and we revert back to the snapshot after we finished
BFO analysis.
So let's get started.
The requirements are as follows.
We need to use virtual machine creator to create which machines, and there are two popular ones.
Oracle Virtual Box.
Oh, we were virtual boxes free.
And you can get it from this link here.
On the other hand, we anyway has got two versions.
The first version, VMware Workstation Pro is a 30 day trial.
Once the 30 day expires, you will not be able to use it any longer.
The second version is being very workstation player.
It is free, but cannot create snapshots.
So it is not suitable for our purpose.
So either you go for what, your box or we in the Workstation Pro, which is 30 days.
But I wouldn't recommend it because after three days you can no longer use it.
So if you are going to go for free and not ready to buy the license for the PMA Workstation Pro, then
stick with your box, which is free.
So the link is here.
And this is TI website where you can download.
Just go ahead and click on the Windows host and download it after downloading it.
You will get up and running it.
You will get windows which look like this.
As you can see on the left panel, I have already installed several Witcher machines.
Next, you need to download ISO image, win Windows seven, ultimate 32 bit version.
Now, the reason why we need Windows seven daily to beat is because Windows seven has got this smaller
footprint.
You will find more samples targeting the Windows seven machine.
Second reason is Windows seven machine is smaller size and footprint and less resource intensive compared
to Windows 10.
And most malware is 32 bit, although there are also those targeting 64 bit.
So go for the Windows seven ultimate.
And then after that, do you need to install the gas addition to use for the virtual machine, the gas
addition, to allow you to go full screen and also allow you to share folders?
CHEERING for this is important because you want to transfer tools and files between your host computer
and your guests virtual machine.
Then we will look at how you check for the to exchange for between guest and host and also how the grid
based snapshot of the virtual machine after configuring it.
Next, we will look at how to configure the virtual machine.
In this case, your virtual machine is your Windows seven service pack one ultimate 32 bit version.
We will disable those Windows update, disable Windows Defender, which is the antivirus for Windows,
disable hiding or file extensions and embouchure all hidden files for this disable.
He s l r.
Is there are is where you the operating system randomise is the entry point for programs which are running.
So we should disable it so that every time you and you analyze, you would get the same entry point
for the memory addresses.
Then we should also disable Windows Firewall and finally create a snapshot.
So the first step is to install the create new virtual machine after downloading Windows seven.
You would have far be quite long.
He has got done.
I saw extension, the file sizes approximately three point eight gigabyte trippingly gigabytes.
So just rename it to make it shorter.
I call mine Windows seven.
So the spang one.
Hespe one just a little bit.
I remember the location for this where you put it.
You can place it somewhere convenient for you.
And then how they are going to go through the process of creating a new with your machine cleaning machine
and then click on new.
And over here, give a name for it called Windows seven.
Windows seven, ultimate XP one, that is to be.
And you can leave the mission for a default as it is, and then go here and look for new settings to
make sure it is selected as Windows seven, 32 bit.
And then over here, click next.
And this you can live in as a default if you have more ram, you can increase the ram size for in-memory.
Maybe you can put two to zero for it and then click on next and then you don't no need to change anything,
just click on the create button and here click on this little default as it is, and here it as dynamically
allocated and click on next.
And this should be fine, as he said, dynamically grow growing Klingler next.
And now you can buy weed on and now you select, uh, start up this.
So click on it and go and look for the new.
I saw image.
I saw and go to the folder where you download it, where you place your.
I so wish is just fine, and he'd been.
And then and just quickly and then I'll click start.
And installation process has begun.
You install it just like any of these stones or windows.
He would go through the whole process and this will take some time.
Yeah, so we just let it run, and once he he knows complete completed, we can install the guest additions
CD.
So you get the next king or you star.
Please accept the licensing agreement, take note.
It's Windows seven, ultimate S.b when?
Click on this.
Hey, hang on custom, and then you click on Ali Unallocated Space.
Click on next.
And now he has begun copying files.
So let it run.
So I would just let it run now.
And we will stop the video for now.
And I will see you in the next lesson and continue where we left off.
Thank you for watching.