{"id":8185,"date":"2024-07-10T09:07:23","date_gmt":"2024-07-10T09:07:23","guid":{"rendered":"\/cybersecurity-blog\/?p=8185"},"modified":"2024-07-10T09:07:23","modified_gmt":"2024-07-10T09:07:23","slug":"encryption-algorithms-in-malware","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/encryption-algorithms-in-malware\/","title":{"rendered":"A Guide to Common Encryption Algorithms in Modern Malware"},"content":{"rendered":"\n

Malware authors rely on encryption to scramble the code and avoid detection by tools like YARA<\/a>, Suricata<\/a>, or any other solution that analyzes the static makeup of the file. <\/p>\n\n\n\n

Pretty much every real malware sample uses some form of encryption<\/a>. Whether it’s encrypting the network traffic<\/a> or obfuscating C2 strings \u2014 encryption is everywhere. <\/p>\n\n\n\n

Since this technique is so widespread in malware, we’ve decided to put together an overview of the most commonly used encryption methods and collect them in one place. <\/p>\n\n\n\n

That\u2019s what this article is about. We’ll look at: <\/p>\n\n\n\n