{"id":1042,"date":"2018-10-02T14:31:45","date_gmt":"2018-10-02T14:31:45","guid":{"rendered":"https:\/\/mchmelar.cz\/?p=1042"},"modified":"2024-12-02T22:38:18","modified_gmt":"2024-12-02T22:38:18","slug":"cybersec-tech-lab-5","status":"publish","type":"post","link":"https:\/\/kb.mchmelar.cz\/?p=1042","title":{"rendered":"CyberSec tech lab 5"},"content":{"rendered":"\n
\nhttps:\/\/cuckoosandbox.org\/\n<\/div><\/figure>\n\n\n\n

From virustotal<\/g> would be shared to<\/g> every company. Cuckoo sandbox does not.\u00a0nodistribute<\/g> wouldnt<\/g> share it as well.
<\/p>\n\n\n\n

<\/p>\n\n\n\n

Samples: http:\/\/www.tud.ttu.ee\/im\/Toomas.Lepik\/Oldthings\/ICT8250\/<\/a>
<\/p>\n\n\n\n

VM detonation. 
(modern.ie) https:\/\/developer.microsoft.com\/en-us\/microsoft-edge\/
IOC index of compromise<\/p>\n\n\n\n

TERMINAL
file = filetype
sha256, 
hash to virustotal

hybrid-analysis.com
19th oct deadline<\/p>\n\n\n\n

Lab “prices” presentation notes:
<\/span>bulletproof hosting www.2×4.ru\/index.php
infecting machine around 2 USD on wallstreetmarket<\/g>
careful about logs<\/g> of ISP, use clear device
use only basic language and different timezone = create new virtual identity (because of fingerprinting)
rizon.net
2kr, IRC
hacker messengers, youtube
about 200 copies of hidden wiki, many of them being<\/g> compromised.  Carding: Tochka gussout<\/g> Q1w2e3r4

<\/p>\n","protected":false},"excerpt":{"rendered":"

From virustotal would be shared to every company. Cuckoo sandbox does not.\u00a0nodistribute wouldnt share it as well. Samples: http:\/\/www.tud.ttu.ee\/im\/Toomas.Lepik\/Oldthings\/ICT8250\/ VM detonation. (modern.ie) https:\/\/developer.microsoft.com\/en-us\/microsoft-edge\/IOC index of compromise TERMINAL file = filetypesha256, hash to virustotal hybrid-analysis.com19th oct deadline Lab “prices” presentation notes:bulletproof hosting www.2×4.ru\/index.phpinfecting machine around 2 USD on wallstreetmarketcareful about logs of ISP, use clear deviceuse only basic language and different timezone = create...<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23],"tags":[55],"_links":{"self":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts\/1042"}],"collection":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1042"}],"version-history":[{"count":3,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts\/1042\/revisions"}],"predecessor-version":[{"id":5777,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts\/1042\/revisions\/5777"}],"wp:attachment":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}