-
Original Filename
-
Unique Identity
-
-
File Format,
Header Analysis,
Basic PE information,
Delivery Context
-
AV Results
Yara Analysis Results
Virustotal Results
-
Any changes on the file system made by the malware
Created/Deleted/Modified Files
-
Network Related IOC
GET/POST Requests
Domains
IP address
-
Any changes in the Registry made by the malware
-
List the order of events, processes, and capabilities.
-
Add any strings, code, interest notes