HA

Harwell - Phishing Email Malware Analysis

Investigate a suspicious phishing email containing malicious attachments. Perform email header analysis, extract and fingerprint the payload, identify the malware's configuration including command-and-control infrastructure, and document host-based indicators of compromise. This lab simulates a real-world incident response scenario at a law firm.

By CyberTask · Easy level

21 Tasks
6 Sections
245 Points
1 hr Duration

What You'll Learn

  • Analyze email headers to identify sender origin
  • Extract and identify malicious file payloads
  • Decode embedded malware configuration data
  • Extract command-and-control server information
  • Identify persistence mechanisms and host indicators

Prerequisites

  • Basic Linux command line navigation
  • Understanding of email header structure
  • Familiarity with file hashing concepts
  • Basic knowledge of malware analysis terminology
  • Understanding of Windows registry basics
Tools & Technologies
grep
ripmime
unzip
file
sha256sum
strings
base64

Ready to Begin?

Sign in or create an account to start this lab and earn points.

Login to Start
Loading...