Harwell - Phishing Email Malware Analysis
Investigate a suspicious phishing email containing malicious attachments. Perform email header analysis, extract and fingerprint the payload, identify the malware's configuration including command-and-control infrastructure, and document host-based indicators of compromise. This lab simulates a real-world incident response scenario at a law firm.
By CyberTask · Easy level
21
Tasks
6
Sections
245
Points
1 hr
Duration
What You'll Learn
- Analyze email headers to identify sender origin
- Extract and identify malicious file payloads
- Decode embedded malware configuration data
- Extract command-and-control server information
- Identify persistence mechanisms and host indicators
Prerequisites
- Basic Linux command line navigation
- Understanding of email header structure
- Familiarity with file hashing concepts
- Basic knowledge of malware analysis terminology
- Understanding of Windows registry basics
Tools & Technologies
grep
ripmime
unzip
file
sha256sum
strings
base64
Ready to Begin?
Sign in or create an account to start this lab and earn points.