Haque, S M TaiabulAhmed, Md. FaisalShanto, Shakil IslamPunom, Afsana Mimi2025-03-242025-03-2420242024ID 24341292ID 20101267http://hdl.handle.net/10361/25771Cataloged from PDF version of thesis.Includes bibliographical references (pages 46-48).This thesis is submitted in partial fulfillment of the requirements for the degree of Bachelor of Science in Computer Science and Engineering, 2024.Malware continues to evolve, posing a significant challenge to global cybersecurity through sophisticated techniques such as obfuscation, process injection, and persistent Command-and-Control (C2) communication. This study conducts a comparative analysis of two active malware strains, XWorm and NanoCore, to uncover shared tactics and unique features that enable their evasion and impact. By employing static, dynamic, and reverse engineering analyses, the research identifies commonalities in delivery methods, persistence mechanisms, and payload obfuscation. Tailored YARA rules are developed to enhance malware detection frameworks, providing practical tools for real-world applications. The findings emphasize the importance of behavior-driven detection strategies and propose generalized mechanisms to address broader malware families, moving beyond isolated strain analysis. This research not only bridges critical gaps in understanding modern malware but also lays a foundation for scalable and adaptive defense systems, contributing to the ongoing battle against evolving cyber threats.48 pagesenBRAC University theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission.XWormNanocoreDetection strategiesMalware analysisComputer security.Thesis