TD Cyber Labs

Cyber LabsBY TUTORIALS DOJO

Labs Tool Trainers Learning Paths Docs

No sign-in required

BackCyber Labs / Malware Triage with strings and YARA Simulated 0 / 60 pts

Malware Triage with strings and YARA

A suspicious executable was quarantined from an endpoint. Pull its readable strings to find hardcoded indicators, then classify it with YARA and ClamAV.

Available tools: strings · yara · clamscan · exiftool
Target: localhost (127.0.0.1)

✓

Run strings — what C2 URL is hardcoded in the sample?

20 pts

Dump the printable strings from the binary.

✓

Scan with YARA — what rule/family does it match?

20 pts

Run the YARA rules over the sample.

✓

Submit the flag hidden in the sample's strings

20 pts

Do the work in the terminal first, then answer.

Applications

target 127.0.0.1--:--

analyst@kali: ~ — Terminal

Congratulations!

You completed Malware Triage with strings and YARA.

Points: 0 / 60
Tasks solved: 0 / 3