Building a malware mutation tool

Details

Supervisors

Legay, Axel

Faculty

Ecole polytechnique de Louvain

Degree label

Master [60] en sciences informatiques

Abstract

Malware mutation is a critical technique employed by cyber criminals to evade detection, creating significant challenges for cyber security. This thesis presents the Modular Packer (MP), a framework designed to generate polymorphic malware. The MP framework includes primary modules for shellcode execution and auxiliary modules for evasion techniques. To evaluate the MP framework, we used PANDI_TRACE, a sandboxing tool developed by UCLouvain, and VirusTotal, an online malware scanning service. These evaluations showed that the MP framework can produce evasive malware variants, highlighting the need for more sophisticated detection strategies in cyber security.