New Hire Old Artifacts

Walkthrough summary

New Hire Old Artifacts TryHackMe walkthrough with 10 answered prompts and lab methodology notes.

Sample prompts covered

• A Web Browser Password Viewer executed on the infected machine. What is the name of the binary? Enter the full path.
  Open the walkthrough page to inspect the full answer and command flow.
• What is listed as the company name?
  Open the walkthrough page to inspect the full answer and command flow.
• Another suspicious binary running from the same folder was executed on the workstation. What was the name of the binary? What is listed as its original filename? (format: file.xyz,file.xyz)
  Open the walkthrough page to inspect the full answer and command flow.
• The binary from the previous question made two outbound connections to a malicious IP address. What was the IP address? Enter the answer in a defang format.
  Open the walkthrough page to inspect the full answer and command flow.
• The same binary made some change to a registry key. What was the key path?
  Open the walkthrough page to inspect the full answer and command flow.