{ "date_type": "published", "creators": [ { "nim": "22.83.0859", "name": { "honourific": null, "lineage": null, "family": "Pratama", "given": "Indra Bagas" } } ], "type": "thesis", "eprint_status": "archive", "eprintid": 32794, "userid": 12, "subjects": [ "000.000.005" ], "status_changed": "2026-09-16 03:35:54", "date": "2026-01-28", "abstract": "Perkembangan teknologi informasi yang pesat membawa dampak positif\r\nsekaligus meningkatkan potensi ancaman keamanan siber, terutama dari\r\npenyebaran malware pada sistem operasi Windows. Jenis malware seperti Remote\r\nAccess Trojan (RAT) dengan objek penelitian AgentTesla yang mempunyai\r\nimpact untuk mencuri data sensitif, mengendalikan sistem dari jarak jauh, serta\r\nmenyembunyikan aktivitas berbahaya melalui teknik packing dan obfuscation.\r\nAncaman ini menuntut adanya metode analisis yang efektif untuk memahami\r\nperilaku malware dan meningkatkan sistem pertahanan siber.\r\nPenelitian ini menggunakan pendekatan Hybrid Reverse Engineering,\r\nyaitu kombinasi antara analisis statis dan analisis dinamis berbasis lingkungan\r\nisolasi FLARE VM. Lingkungan penelitian dibangun menggunakan sistem virtual\r\nterisolasi yang dilengkapi berbagai alat analisis seperti Detect It Easy (DIE), PE\r\nStudio, x32dbg, Process Hacker, dan FakeNet-NG. Analisis statis digunakan\r\nuntuk mengidentifikasi struktur internal dan fungsi berbahaya dalam kode biner\r\nmalware, sedangkan analisis dinamis dilakukan untuk mengamati perilaku\r\nruntime malware terhadap sistem dan jaringan.\r\nHasil penelitian menunjukkan bahwa FLARE VM efektif sebagai platform\r\nanalisis hybrid karena mampu mendeteksi dan memahami teknik penyamaran\r\nkode yang digunakan malware. Penelitian ini berhasil mengidentifikasi Indicators\r\nof Compromise (IoC) seperti domain, IP, dan aktivitas jaringan yang\r\nmencerminkan perilaku berbahaya. Temuan ini diharapkan dapat menjadi\r\nreferensi bagi peneliti, analis keamanan, dan praktisi forensik digital dalam\r\nmeningkatkan kemampuan deteksi serta mitigasi ancaman malware d i lingkungan\r\nWindows.", "lastmod": "2026-09-16 03:35:54", "department": "Fakultas Ilmu Komputer", "uri": "http:\/\/eprints.amikom.ac.id\/id\/eprint\/32794", "keywords": "Malware, Reverse Engineering, FLARE VM, Analisis Statis,\r\nAnalisis Dinamis, Static Analysis,\r\nDynamic Analysis.", "thesis_type": "bachelor", "institution": "Universitas AMIKOM Yogyakarta", "rev_number": 14, "datestamp": "2026-09-16 03:35:54", "documents": [ { "language": "id", "files": [ { "datasetid": "document", "fileid": 1153600, "hash_type": "MD5", "mtime": "2026-09-16 03:30:27", "filesize": 1753918, "mime_type": "application\/pdf", "uri": "http:\/\/eprints.amikom.ac.id\/id\/file\/1153600", "filename": "COVER.pdf", "objectid": 327064, "hash": "6e5ec2fadba5b09ecd3c95d3af2ed923" } ], "formatdesc": "COVER - ABSTRAK", "docid": 327064, "placement": 1, "eprintid": 32794, "mime_type": "application\/pdf", "content": "published", "uri": "http:\/\/eprints.amikom.ac.id\/id\/document\/327064", "security": "public", "rev_number": 2, "format": "text", "pos": 1, "main": "COVER.pdf" }, { "mime_type": "application\/pdf", "content": "published", "docid": 327065, "placement": 2, "eprintid": 32794, "formatdesc": "BAB I", "files": [ { "fileid": 1153602, "datasetid": "document", "mime_type": "application\/pdf", "filesize": 237453, "mtime": "2026-09-16 03:30:31", "hash_type": "MD5", "hash": "3e61a75d841309dff7f2a26771469555", "uri": "http:\/\/eprints.amikom.ac.id\/id\/file\/1153602", "objectid": 327065, "filename": "BAB I.pdf" } ], "language": "id", "main": "BAB I.pdf", "pos": 2, "rev_number": 2, "security": "public", "format": "text", "uri": "http:\/\/eprints.amikom.ac.id\/id\/document\/327065" }, { "pos": 3, "main": "BAB II.pdf", "uri": "http:\/\/eprints.amikom.ac.id\/id\/document\/327066", "format": "text", "security": "validuser", "rev_number": 2, "placement": 3, "eprintid": 32794, "docid": 327066, "content": "published", "mime_type": "application\/pdf", "language": "id", "files": [ { "hash": "13c8ff1e934a4f883f57febcf5a9be8f", "uri": "http:\/\/eprints.amikom.ac.id\/id\/file\/1153604", "objectid": 327066, "filename": "BAB II.pdf", "mime_type": "application\/pdf", "mtime": "2026-09-16 03:30:33", "filesize": 851660, "hash_type": "MD5", "fileid": 1153604, "datasetid": "document" } ], "formatdesc": "BAB II" }, { "main": "BAB III.pdf", "pos": 4, "security": "validuser", "rev_number": 2, "format": "text", "uri": "http:\/\/eprints.amikom.ac.id\/id\/document\/327067", "mime_type": "application\/pdf", "content": "published", "docid": 327067, "eprintid": 32794, "placement": 4, "files": [ { "objectid": 327067, "uri": "http:\/\/eprints.amikom.ac.id\/id\/file\/1153606", "filename": "BAB III.pdf", "hash": "be7a4cb3b241826c1adc1b09a5878b29", "mtime": "2026-09-16 03:30:37", "hash_type": "MD5", "filesize": 453585, "mime_type": "application\/pdf", "datasetid": "document", "fileid": 1153606 } ], "formatdesc": "BAB III", "language": "id" }, { "main": "BAB IV.pdf", "pos": 5, "rev_number": 2, "security": "validuser", "format": "text", "uri": "http:\/\/eprints.amikom.ac.id\/id\/document\/327068", "content": "published", "mime_type": "application\/pdf", "eprintid": 32794, "placement": 5, "docid": 327068, "files": [ { "uri": "http:\/\/eprints.amikom.ac.id\/id\/file\/1153608", "objectid": 327068, "filename": "BAB IV.pdf", "hash": "8dc0d2a23c5395f0552b959f693ce782", "datasetid": "document", "fileid": 1153608, "hash_type": "MD5", "mtime": "2026-09-16 03:30:42", "filesize": 1451781, "mime_type": "application\/pdf" } ], "formatdesc": "BAB IV", "language": "id" }, { "uri": "http:\/\/eprints.amikom.ac.id\/id\/document\/327069", "security": "public", "rev_number": 2, "format": "text", "pos": 6, "main": "BAB V.pdf", "language": "id", "formatdesc": "BAB V", "files": [ { "uri": "http:\/\/eprints.amikom.ac.id\/id\/file\/1153610", "objectid": 327069, "filename": "BAB V.pdf", "hash": "0639112cabc648062f6027bad24df968", "mtime": "2026-09-16 03:30:45", "hash_type": "MD5", "filesize": 82364, "mime_type": "application\/pdf", "datasetid": "document", "fileid": 1153610 } ], "placement": 6, "eprintid": 32794, "docid": 327069, "content": "published", "mime_type": "application\/pdf" }, { "uri": "http:\/\/eprints.amikom.ac.id\/id\/document\/327070", "security": "validuser", "rev_number": 2, "format": "text", "pos": 7, "main": "Daftar Pustaka.pdf", "language": "id", "files": [ { "mime_type": "application\/pdf", "mtime": "2026-09-16 03:30:47", "filesize": 90424, "hash_type": "MD5", "fileid": 1153612, "datasetid": "document", "hash": "20cc7f9a94bdd379d1e69b3e86be7771", "filename": "Daftar Pustaka.pdf", "uri": "http:\/\/eprints.amikom.ac.id\/id\/file\/1153612", "objectid": 327070 } ], "formatdesc": "DAFTAR PUSTAKA", "docid": 327070, "eprintid": 32794, "placement": 7, "mime_type": "application\/pdf", "content": "published" }, { "uri": "http:\/\/eprints.amikom.ac.id\/id\/document\/327071", "format": "text", "security": "staffonly", "rev_number": 2, "pos": 8, "main": "Publikasi.pdf", "language": "id", "formatdesc": "PUBLIKASI", "files": [ { "uri": "http:\/\/eprints.amikom.ac.id\/id\/file\/1153614", "objectid": 327071, "filename": "Publikasi.pdf", "hash": "5e0b5f0ace4c9212d9eee1ef375cd473", "datasetid": "document", "fileid": 1153614, "mtime": "2026-09-16 03:30:50", "filesize": 1502156, "hash_type": "MD5", "mime_type": "application\/pdf" } ], "placement": 8, "eprintid": 32794, "docid": 327071, "content": "published", "mime_type": "application\/pdf" } ], "contributors": [ { "name": { "given": "Muhammad", "honourific": null, "family": "Koprawi", "lineage": null } } ], "dir": "disk0\/00\/03\/27\/94", "full_text_status": "restricted", "divisions": [ "tk" ], "corp_creators": [ "Universitas AMIKOM Yogyakarta" ], "metadata_visibility": "show", "thesis_name": "skripsi", "ispublished": "pub", "title": "ANALISIS HYBRID REVERSE ENGINEERING\r\nMALWARE WINDOWS BERBASIS LINGKUNGAN ISOLASI\r\nFLARE VM" }