RE Training Content

Janice from accounting is beside herself! She was contacted by the SOC to tell her that her work credentials were found on the dark web by the threat intel team. We managed to recover some files from her machine and sent them to the our REM analyst.

This Sherlock case involves a malware incident where a seemingly innocuous program, shared within a gaming community, turns out to be malicious. The program, disguised as a mod-making tool, is executed by a senior software engineer at Acme Inc., leading to a ransomware attack. The malware encrypts files on the victim's machine and demands a ransom for their decryption. Through this case, investigators will analyze the provided artifacts to uncover the malware's behavior, including its communication with a command and control server, the execution of additional malicious binaries, and the encryption process.