flare-vm VS Binance-APK-Analysis

Follow the instructions here to setup a FLARE vm which will have all the tools you need for the labs in the book flare vm

FLARE VM: this is a boxstarter from Mandiant to add a bunch of tools to Windows for malware analysis

build it as a proxmox host and have a malware analysis VM (flare-vm for example - https://github.com/mandiant/flare-vm) you can then interact with it via Console or host another VM as an SSH jump box and ssh tunnel to port 3389 on the malware vm

FLARE VM: a Windows toolkit for malware analysis from Mandiant: https://github.com/mandiant/flare-vm

I usually run it in virtualbox without guest additions, get one of those free windows 10 isos from microsoft and install the mandiant flare vm on it ( https://github.com/mandiant/flare-vm ), after everything is installed i keep a snapshot of the windows machine with everything set up so i dont have to do it all again and once its done i set the network to internal and set set up inetsim on remnux as well if im going to do dynamic analysis so that i have an internet simulator that the malware can talk to.

I use https://any.run for quick stuff or just fire my FlareVM up.

Check my github repository with the highlights of my findings https://github.com/AAH20/Binance-APK-Analysis