Malware Challenges AnalyzeMe No1

Malware Analysis
1

Background

Hello agent 0x00, welcome to the malware analysis training grounds. You are now being trained to become part of the most sophisticated malware analysis teams in the NSA. To fully prepare you for the battlefield, we have created this small course for you to complete.

We have extracted this low grade sample from a cyber crime gang operating in Sudan. We would like you to take a look at this sample and extract any meaningful artifacts from it.

File: https://filebin.net/vlamcdxrukede70h

Good Luck. img

Technical Assignment

Attached below is a malware sample that I’ve created, please run it in an appropriate Virtual Machine. You must do the following tasks and please be verbose as possible:

Extract any host based indicators

  1. Does the sample drop any files on disk? If yes where?
  2. If a file is dropped, what is the contents of it?

Anti RE

  1. How does the sample manage to “waste” debugging time? (Use a debugger for this one)

Extract any network based indicators

  1. Does this sample connect to any website? if it does what is the host name of that website?

Tools

You can use any tools in your arsenal.

Article Link: https://danusminimus.github.io/Malware-Challenges-1/