Would you like to inspect the original subtitles? These are the user uploaded subtitles that are being translated: 1 00:00:00,000 --> 00:00:06,433 Welcome, our malware samples are totally safe but is better to take some precautions 2 00:00:11,133 --> 00:00:19,299 Before starts any practice make sure your Lab is ready. All our malware samples must be executed only in Windows Virtual Machine. 3 00:00:21,233 --> 00:00:26,699 If you accidentally executed the malware sample Rams1, this will happen: 4 00:00:26,700 --> 00:00:36,200 It will try to encrypt the files in your virtual machine located on: test folder 5 00:00:36,200 --> 00:00:44,966 You probably don’t even have this “test” folder, is something we will create for our Ransomware section later on this course. 6 00:00:45,666 --> 00:00:51,499 If you accidentally executed the malware samples TotalAware 2-3, this will happen: 7 00:00:51,500 --> 00:00:58,866 They will try to create a file and start to steal your keystrokes and save them in that file. 8 00:00:58,866 --> 00:01:09,066 You can realize, never of these actions put on sever danger your equipment even if you accidentally execute our binaries 9 00:01:09,066 --> 00:01:16,532 in your host machine. However when you’re dealing with malware you should never skimp on precautions. 10 00:01:16,533 --> 00:01:23,999 For example you could easily modify the instruction on Rams1 specifying that only encrypts “test” folder 11 00:01:24,000 --> 00:01:27,166 to encrypt the entire driver “C:”. 12 00:01:31,533 --> 00:01:34,966 steps to download our malware samples 13 00:01:34,966 --> 00:01:39,032 Step one and most important, start your Windows virtual machine. 14 00:01:39,033 --> 00:01:43,299 You never ever should execute our malware samples in your host machine. 15 00:01:43,300 --> 00:01:51,666 Step two, disabled Windows securities in your virtual machine as we taught you in Setting up the lab, 16 00:01:51,666 --> 00:01:59,266 otherwise Windows may detect and delete your malware sample. Step three, download the malware samples in 17 00:02:00,633 --> 00:02:06,999 If you have internet troubles in your virtual machine probably is because you have configure Inetsim, 18 00:02:07,000 --> 00:02:14,666 to go back online just follow the lesson Get back windows ten virtual machine online on Setting up the lab section 19 00:02:16,600 --> 00:02:19,700 You certainly could download our malware samples in your host machine, 20 00:02:19,700 --> 00:02:26,800 but you could face the following problem: Your antivirus and windows defender may detect and delete the sample. 21 00:02:26,800 --> 00:02:34,633 If you want to try, do this: Save the malware in your “share folder” and then add this “share folder” to your antivirus exclusions. 22 00:02:34,633 --> 00:02:40,199 Don't miss next lesson, we'll start static analysis 2942