File: Boogeyman.2.v1.4.2.zip ... 🆕
The file is used to practice analyzing malicious documents, payload stages, and memory captures. Below are useful articles and write-ups that explain the contents and behavior of this file:
: This article provides a deep dive into the specific commands executed by the malware, such as using wscript.exe to run malicious JavaScript files found within the infection chain Medium . File: Boogeyman.2.v1.4.2.zip ...
: A guide on using the Volatility tool to analyze the memory capture included in the challenge to identify command and control (C2) connections Francesco Pastore on Medium . Summary of Malicious Activity in the Challenge According to the technical walkthroughs: The file is used to practice analyzing malicious
: Often appears as a fake document (e.g., a "Project Financial Summary") which is actually an HTML application or malicious script. Summary of Malicious Activity in the Challenge According
: A phishing email containing a malicious attachment.