Skip to main content

What happened ..??

Introduction 

Below is the memory dump of Donny's system. He's not happy with what's going on it :(.
Find What's happened ?
Link: https://mega.nz/#F!0moF0RaC!H2W9tUNs5Pjk1PA_p7dudA
SHA256: 3E4FF07DA0D18E0387D0A6E8A0FA936974A652EB30D1FB3A4E61CA391E731944

Hint: Use Volatility or Rekall Memory Forensics Framework

Solutions: Coming Soon !! :)


Comments

  1. JP6 March 2018 at 00:45

    Can you share the password for extracting the zip file ?
    prajapati.jay.67@gmail.com

    ReplyDelete
  2. Abdul Djalil Djayali14 October 2018 at 12:17

    I need the password to
    jlcnate.zit@gmail.com

    ReplyDelete
  3. Unknown27 April 2019 at 13:39

    the password to nitznitz100@gmail.com

    ReplyDelete
  4. Anonymous2 February 2020 at 22:10

    please share the pass at sher009kh@gmail.com

    ReplyDelete
  5. Unknown6 April 2020 at 15:39

    please share the pass at warmarshal0@gmail.com

    ReplyDelete
  6. MiSdIrEcTi0nAl17 April 2020 at 18:51

    please share the pass at holakoto@gmail.com

    ReplyDelete
    Replies
    1. Vieira3 May 2020 at 20:44

      please share the pass at vieirarbv@gmail.com

      Delete
  7. Anonymous6 May 2020 at 21:30

    infected

    ReplyDelete

Post a Comment

Popular posts from this blog

Memory Analysis of WannaCry Ransomware

Introduction  This post explains the memory dump analysis of WannaCry infected system using volatility (An open source memory forensics framework) and other open source tools. It doesn't cover the analysis of initial infection vector, propagation and recovery of infected system. The objective is to leverage memory forensic analysis to uncover and extract Indicators of Compromise (IoC)  WannaCry  WannaCry (or WannaCrypt, WanaCrypt0r 2.0, Wanna Decryptor) is a ransomware program targeting the Microsoft Windows operating system. On Friday, 12 May 2017, a large cyber-attack using it was launched, infecting more than 230,000 computers in 150 countries, demanding ransom payments in the cryptocurrency bitcoin in 28 languages.The attack has been described by Europol as unprecedented in scale. https://en.wikipedia.org/wiki/WannaCry_ransomware_attack Discalimer You are dealing with real malware samples Don’t expose them to internal networks or internet Analyze them in a...
67 comments
Read more

Analyze Sysmon for Linux logs using Kusto Query Language

Recently I have come across a situation where I need to install Sysmon on a Linux virtual machine in Azure subscription and analyze those logs in Log analytics workspace. This post is a quick guide to help installing Sysmon and analyzing logs using Kusto query language.  Prerequisites to install Sysmon for Linux  Ensure the Linux virtual machine is on boarded to Log analytics workspace.  Collect Syslog events with Azure Monitor Agent. Install using this Installing Sysmon on Linux  For complete installation process on various .nix operating systems, follow Sysmon installation instructions here    Ubuntu 20.04 & 22.04  Register Microsoft key and feed wget -q https://packages.microsoft.com/config/ubuntu/$(lsb_release -rs)/packages-microsoft-prod.deb -O packages-microsoft-prod.deb sudo dpkg -i packages-microsoft-prod.deb  Install SysmonForLinux sudo apt-get update sudo apt-get install sysmonforlinux The Kusto query to parse the Sysmon logs on a Li...
Post a Comment
Read more
Dionaea – A Malware collection honeypot Introduction  This post outlines the necessary requirements, configurations and step by step installation procedure for honeypot Dionaea. It also briefs the logging of various attacks from external entities and produces the results to a dashboard interface feature for ease of understanding. Dionaea Dionaea is one of the modern malware collection honeypots that’s aimed to trap malware exploiting vulnerabilities exposed by services offered over a network to obtain a copy of malware. Dionaea emulates protocols by embedding python as its scripting language and also detects shellcodes using LibEmu. It also supports IPv6 and TLS. Dionaea traps malware from below mentioned protocols. • SMB (Server Message Block):  • HTTP (Hyper Text Transfer Protocol) • FTP (File Transfer Protocol) • TFTP (Trivial File Transfer Protocol)  • MSSQL (Microsoft SQL Server)  • VoIP (Voice over IP)  Requirements...
7 comments
Read more