Malware Analysis & Reverse Engineering

When sensitive information is compromised by malicious software, knowing how it works and what it’s capable of doing is crucial to an effective incident response.

Malicious software attacks which succeed in infiltrating a company's network pose strong threats against commercial and public sector interests. At Kroll, we help organizations identify and analyze suspected malware to determine exactly what it was—or was not—capable of doing.

Understanding the malware threat from viruses and spyware

No antivirus or antimalware product can identify and stop 100 percent of malicious code from penetrating or activating inside your IT network. If you suspect malware caused a data breach or other information security incident, it is vital to quickly understand the scope of the malware impact on your systems and identify any data loss. The only true way to do this is to look at the machine language code inside the malware. Most hackers use sophisticated software to make it hard to get to the actual code; they may even throw a layer of encryption into the equation. But it is possible to uncover that code, and the results can provide insight into the exact nature and scope of a breach incident. Kroll has developed solutions to quickly detect, analyze, and inactivate malware viruses.

Malware analysis: Our approach

As malware threats continue to evolve in sophistication, Kroll continues to evolve in technology solutions and the ability to perform live system memory and forensic analysis. We have an expert team of information security consultants and network forensic analysts who are specifically trained to identify the impact of unknown software code within your IT network. Through reverse engineering, we quickly examine hostile malware code to understand the program and define its functionality. Further analysis enables us to identify the scope and intent of the malicious code, deepening your understanding of the compromise so you can launch a targeted incident response.