Training for New Analyst

Prompts and answers

• The file suffix attached to the email will tell you!
  html
• What MITRE ATT&CK Technique is this an example of? (Use Sub-Technique name if applicable)
  html smuggling
• What type of file was downloaded to the system?
  .iso
• [System Binary Proxy Execution, Technique T1218 - Enterprise | MITRE ATT&CK®](https://attack.mitre.org/techniques/T1218/)
  rundll32
• Use logs or file properties to find the answer
  Windows\System32\rundll32.exe Test-Loader.dll Runner
• This malware initiated a network connection to download additional malicious code, what was the URL with URI of the first file downloaded?
  https://github.com/P4BNS/THM/raw/main/ReflectiveLoad.ps1