Analyzing a sample
When analyzing suspected malware, a good first step is to run multiple antivirus programs on it. You can also submit to online sandboxes and analysis tools, but be aware that when a sample is submitted, it becomes public knowledge, and if you or the organization is targeted, the attacker will know that you found their malware. Additionally, there is potential for company information, including network telemetry and credentials, to be contained within the sample, so proceed with caution.
If you do want to research or submit a sample, one of the premiere sites to do this is VirusTotal (https://www.virustotal.com). Not only will the site allow you to submit a sample for analysis, but it also allows you to search based on several indicators of compromise (IOCs), including URL, IP address, domain, or file hash. This can be helpful if you are working with a sample and you are unsure if the organization is targeted.
Checking to see if there is already information...
