MrRobot Challenge

Credit

This lab is made by CyberDefenders.

Lab Scenario

“An employee reported that his machine started to act strangely after receiving a suspicious email for a security update. The incident response team captured a couple of memory dumps from the suspected machines for further inspection. Analyze the dumps and help the SOC analysts team figure out what happened!”

Downloading the Memory Dump / Running on the Cloud Lab

Attention: the sample you are about to download is including malicious files and malware samples. To protect your system, please analyze it on a completely isolated virtual machine if it is not running on cloud

Please visit the lab official link to download the memory dump.

Used Tools

• Volatility2
• Volatility3
• Rstudio

Instructions

To uncompress the lab (pass: cyberdefenders.org)

Conclusion

In this blog, I briefly notified you about a newly released memory forensic challenge.

~ Cya in the Next One