Threat_analysis

Medium Disk analysis Antxine

While the operator was working on his machine, he noticed strange behaviour on his workstation. With the help of his CERT, he made a copy of the hard disk for analysis. Using your knowledge of forensics and threat analysis, find out some of the characteristics of this malware.

Format: GCC{portC2:MITREATT&CK_Persistence_Technique:malware_family} Example of flag : GCC{1337:T9999:dridex}

NB: No MITRE ATT&CK subtechnique (if you find T9999.001, put T9999)

NB2: The malware family is lowercase.

http://challenges1.gcc-ctf.com:8080/disk.7z