A Primer on Reverse Engineering Malwares

Case Study – Operation Aurora
Command &
Control Centre
Site
hosting
Malware
5. Once the Malware infection is
successful C&C controls and
monitors the victim's computer
3. Malicious Code tries to
download a variant of hydra
Trojan onto victim’s machine
© 2011 KPMG, an Indian Partnership and a member firm of the KPMG network of independent member firms affiliated
with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved.
4. Attacker’s website
serves the Malware
Firewall
1. User opens a
infected website
on internet
2. JavaScript based exploit vector,
uses IE’s 0day vulnerability and
executes Shellcode component
Internet