Hunt Me II: Typo Squatters

Walkthrough summary

Hunt Me II: Typo Squatters TryHackMe walkthrough with 15 answered prompts and lab methodology notes.

Sample prompts covered

• What is the URL of the malicious software that was downloaded by the victim user?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the IP address of the domain hosting the malware?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the PID of the process that executed the malicious software?
  Open the walkthrough page to inspect the full answer and command flow.
• Following the execution chain of the malicious payload, another remote file was downloaded and executed. What is the full command line value of this suspicious activity?
  Open the walkthrough page to inspect the full answer and command flow.
• The newly downloaded script also installed the legitimate version of the application. What is the full file path of the legitimate installer?
  Open the walkthrough page to inspect the full answer and command flow.