Jump to content

HTB (sherlock): Dream Job-2

From Haidhi Wiki
Revision as of 04:31, 2 February 2026 by SanzSkuy (talk | contribs) (Created page with "Pertama download filenya, pas di-extract dia muncul lagi dua file: <code>DANGER.txt</code> dan <code>DANGER.zip</code> File:Sherlock-dream-job2-1.png abis itu extract lagi <code>DANGER.zip</code>, password nya ada di <code>DANGER.txt</code>. Nanti isinya bakal ada 3 file 950px == According to MITRE ATT&CK, what previously known malware does DRATzarus share similarities with? == Buka google, terus searching '''MITRE ATT&CK DRATza...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Pertama download filenya, pas di-extract dia muncul lagi dua file: DANGER.txt dan DANGER.zip

abis itu extract lagi DANGER.zip, password nya ada di DANGER.txt. Nanti isinya bakal ada 3 file

According to MITRE ATT&CK, what previously known malware does DRATzarus share similarities with?

Buka google, terus searching MITRE ATT&CK DRATzarus, harusnya paling atas ada https://attack.mitre.org/software/S0694/

Jadi jawabannya adalah Bankshot

Which Windows API function does DRATzarus use to detect the presence of a debugger?

Masih di link yang sama, scroll ke bawah dikit

Jawabannya IsDebuggerPresent