Forensik Digital Artefak Malware Persistent Glitch pada Windows Server 2025 Menggunakan Metodologi Berbasis ISO/IEC 27037 dan ISO/IEC 27042
DOI:
https://doi.org/10.56706/ik.v20i2.165Keywords:
Forensik Digital, ISO/IEC 27037, ISO/IEC 27042, Malware, WindowsAbstract
Penelitian menyajikan hasil investigasi forensik digital terhadap indikasi kompromi keamanan pada infrastruktur Windows Server 2025. Insiden melibatkan Persistent Windows Server Glitch Malware yang menyebabkan gangguan visual dan operasional server. Penelitian ini menerapkan pendekatan Live Forensics untuk mengamankan data volatil pada memori (RAM) serta analisis Dead Forensics pada disk penyimpanan. Seluruh proses akuisisi bukti digital dan analisis interpretatif dilaksanakan dengan mematuhi standar ISO/IEC 27037 untuk penanganan bukti dan ISO/IEC 27042 untuk analisis guna menjamin integritas temuan. Hasil analisis menemukan artefak kunci berupa file eksekusi berbahaya setup.exe serta jejak eksekusi skrip PowerShell di memori yang menyebabkan anomali visual persisten. Investigasi membuktikan bahwa sistem terkompromi melalui metode social engineering (phishing) yang menyamar sebagai pembaruan Windows.
References
[1] N. Reuben, R. Irawan, R. N. Jovann, S. Achmad, F. A. Junior, and Nadia, “Raising Cyber Security Awareness to Reduce Social Engineering Through Social Media in Indonesia,” in Proc. 3rd Int. Conf. Electronic and Electrical Engineering and Intelligent System (ICE3IS), 2023, doi: 10.1109/ICE3IS59323.2023.10335454.
[2] M. U. Rana, M. A. Shah, and O. Ellahi, “Malware Persistence and Obfuscation: An Analysis on Concealed Strategies,” in Proc. 26th Int. Conf. Automation and Computing (ICAC), 2021, doi: 10.23919/ICAC50006.2021.9594197.
[3] Nasrullah, Judhariksawan, A. Ilyas, and Haeranah, “The Role of Digital Forensics in Criminal Investigations: An Analysis of Electronic Evidence in the Indonesian Legal System,” Pakistan Journal of Criminology, vol. 16, no. 4, pp. 255–268, Dec. 2024.
[4] Badan Standardisasi Nasional, “SNI ISO/IEC 27037:2012 Teknologi Informasi—Teknik Keamanan—Pedoman Identifikasi, Pengumpulan, Akuisisi, dan Preservasi Bukti Digital,” Jakarta, Indonesia, 2014.
[5] Badan Standardisasi Nasional, “SNI ISO/IEC 27042:2015 Teknologi Informasi—Teknik Keamanan—Pedoman untuk Analisis dan Interpretasi Bukti Digital,” Jakarta, Indonesia, 2021.
[6] R. Sihwail, K. Omar, and K. Z. Ariffin, “A Survey on Malware Analysis Techniques: Static, Dynamic, Hybrid and Memory Analysis,” International Journal of Advanced Science Engineering and Information Technology, vol. 8, no. 4-2, p. 1662, 2018.
[7] A. R. Javed, W. Ahmed, M. Alazab, Z. Jalil, K. Kifayat, and T. R. Gadekallu, “A Comprehensive Survey on Computer Forensics: State-of-the-Art, Tools, Techniques, Challenges, and Future Directions,” IEEE Access, vol. 10, pp. 11065–11089, 2022, doi: 10.1109/ACCESS.2022.3142508.
[8] Volatility Foundation, “Volatility Foundation,” [Online]. Available: https://www.volatilityfoundation.org/. [Accessed: Feb. 12, 2025].
[9] N. D. W. Cahyani, E. M. Jadied, N. H. A. Rahman, and E. Ariyanto, “The Influence of Virtual Secure Mode (VSM) on Memory Acquisition,” International Journal of Advanced Computer Science and Applications (IJACSA), vol. 11, p. 547, 2022, ISSN: 2156-5570.
[10] J. Krause, Mastering Windows Server 2025: Accelerate Your Journey from IT Pro to System Administrator Using the World's Most Powerful Server Platform. Birmingham, U.K.: Packt Publishing, 2025.
[11] H. Nyholm, K. Monteith, S. Lyles, M. Gallegos, M. DeSantis, J. Donaldson, and C. Taylor, “The Evolution of Volatile Memory Forensics,” Journal of Cybersecurity and Privacy, vol. 2, no. 3, 2022.
Downloads
Submitted
Accepted
Published
Issue
Section
License
Copyright (c) 2026 Info Kripto
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
