PDF document with more relevant information about analized smaple:

• File description:
  Useful information for sample identification
• Trojan familiy description
  Description about the trojan family belongs to, affected browsers, monitoring techniques, and data gathering.
• Infraestructure
  URLs used by the trojan to download configuratoin files, send stolen data, pharming, etc.
• Antivirus analyses
  Results of analyzing the sample with several AV engines when detected.
• Network connection
  Connections established by the sample during its execution.
• DNS resolutions
  DNS requests that are made by the malware.

Unlike the executive report, the technical report is more detailed.

• Files created by the sample
• Information derived from a a deeper sample analysis.
  DLLs, imported and exported functions, PE resources, etc.
• Sample behavior
  • Spawn processes.
  • Functions that are called by each child process.
  • Files, registry keys, and mutex that are created, modified or deleted by the malware.
• Detailed description of the malware family.
• Proofs and evidences:
  
  • Network traffic.
  • Config file (f.i.: Zeus config file).
  • Hosts files.
  • Memory dumps.
  • etc.

Each customer recieves in a fast and personalized way as many alerts as flaws detected for monitoried products. For more complex systems, we have developed a complete API system that enables to customize and adapt this service to your needs.

Each alert is provided with all information needed and patches (if any) and countermeasures, all withing our 24/7 active service.

Historical report for every customer, where vulnerabilities affecting your system may be checked, allowing queries based on any alert characteristic .

The web interface, allows the administrator of your company to catalog vulnerabilities ,so that they can be informed about patched flaws, pending actions, etc.

It is all built-in in our CSIRT services panel , where executive statistics are available.

This service is oriented to banks and online transaction companies . Hispasec has developed sensors dedicated to detect and analyze fraudulent copies of this websites.

Antiphishing serivice alerts you any time a fraudulent infraestructure is detected and starts taking down process with our 24/7 team. The target is to take down fraudulent websites .

Success is guaranteed. Besides, a deep analysis of the attacker profile is conducted, in order to alert legal forces are alerted who can shutdown the fraudulent copies of websites..

Every incident is documented in our CSIRT and is correlated in executive graphs.

This service is oriented to banks and online transaction companies . Entity is monitored in our systems. If our automatic detection system alerts us about a potential malware affecting your entity, it is deeply studied by our analysis team that reverse-engineer the sample.

Once a trojan affects the entity has been detected, we first alert the customer and then we take down the infrastructure used by the trojan (e.g. dropsites).

Studying the sample enables to know eventual countermeasures that might be implemented in your bank portal in order to prevent some trojan families attacks.

By studying your clients infected systems, we can have a better understanding of the attack vector it is based on. It enables us to know the injection, perpetuation, ciphering, hiding methods, etc. All those characteristics allows us to get the malware profile affecting your company , and improves the detection of another possible families. Aside, it may be possible to implement some countermeasures so that the threats may be mitigated . It also allows us to alert your clients about how to detect suspect behavior when using your banking systems.

Auditing services meet 7 phases:

• Enumerating network, topology and protocols.
• Identifiying systems and devices.
• Analysing services and applications.
• Detecting, and evaluating vulnerabilities.
• Specific correction measures.
• Perimetral control in real time with our own technology Sensor Scan Network .
• Recommendations about implanting and proactive measures.

Auditing services may be:

• Internal auditing. In this kind of auditing, security of the internal and local networks is evaluated.
• Perimetral audits. Local or Internet perimetral network is audited.
• Penetration testing. Penetration testing is designed to access audited systems without any previous knowledge. It is an interesting complement of the perimetral audit.
• Forensics. Forensics is a set of metodologies to study security incidents that tries to answer this question: ¡How could anyone get into my systems and what where the damages?.
• Web application audits. It examines external web applications, seeking for vulnerabilities (SQL injection, Cross Site Scripting, etc.)
• Source code audits. Our team reviews source code of your application, seeking for potential vulnerabilities.

UDYAT is a powerful lexic classifier able to detect contents that may affect your company's image .

Since automatic detectection may lead to false positives or incorrect classifcations, the suspect content is revised by our analysts that validates and checks its categorization.

This treatment results in a structured lists ordered by categories that may be completed by your own choices.

Besides notifications, a graphical report is provided which includes charts that can be reused further in a presentation for instance.

It includes graphs and tables about:

• Monthly alerts depending on their categorization
• Monthly alerts depending on their publication method : press, Facebook, Twitter, etc.
• Graphics with most used categories and publicatoin.
• Most offensive alerts for each category.

Alerts may be checked in real time with our HTTP based API. This allows to replicate notification data base so it is integrated within other products, services or security aggregation portals .

Because of the HTTP based interface, it may be integrated with any program language.