Basic Dynamic Analysis

Walkthrough summary

Basic Dynamic Analysis TryHackMe walkthrough with 12 answered prompts and lab methodology notes.

Sample prompts covered

• If an analyst wants to analyze Linux malware, what OS should their sandbox's Virtual Machine have?
  Open the walkthrough page to inspect the full answer and command flow.
• Monitor the sample ~Desktop\Samples\1.exe using ProcMon. This sample makes a few network connections. What is the first URL on which a network connection is made?
  Open the walkthrough page to inspect the full answer and command flow.
• What network operation is performed on the above-mentioned URL?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the name with the complete full path of the first process created by this sample?
  Open the walkthrough page to inspect the full answer and command flow.
• The sample ~Desktop\samples\1.exe creates a file in the C:\ directory. What is the name with the full path of this file?
  Open the walkthrough page to inspect the full answer and command flow.