Challenges
Utilizing CyberChef, any automated tools covered, and the Qakbot.txt
and EMOTET_2.txt
samples within the Technical requirements section, attempt to answer the following questions:
- Which site is the Qakbot malware downloading its executable from?
- Which methodology is Qakbot using to download the file? (Which built-in function is it using?)
- Which C2s is the Emotet sample using for distribution?
- What was the exact recipe utilized in CyberChef to obtain this information?