Patent ID: 11930019
Assignee: SAUDI ARABIAN OIL COMPANY
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A malware analysis method comprising:
receiving a file on a virtual machine, the virtual machine comprising:
a web debugging proxy, wherein the web debugging proxy is prepared to filter web traffic noise by gathering a baseline reading of web traffic of the virtual machine,
a system resource monitor, and
a file analysis tool;

performing, with the file analysis tool, a static analysis on the file, the static analysis comprising:
determining a set of file properties of the file; and
storing the determined file properties in a repository;

performing, with the web debugging proxy and the system resource monitor, a dynamic analysis on the file, the dynamic analysis comprising:
running the file on the virtual machine;
determining, with the web debugging proxy, web traffic of the virtual machine;
determining, with the system resource monitor, executed commands and modifications to system resources of the virtual machine originating from the file; and
storing the determined traffic and executed commands in the repository.