ReversingHard

APT Malware Reverse Engineering

malwarereverse-engineeringc2

UNG Cybersecurity Faculty

1/15/2025

400 points

Challenge Files

Challenge Instructions

README.txt

💡 Tip: Additional challenge-specific files are located in the assets folder. Check the instructions file for details.

Challenge Overview

Reverse engineer a custom APT malware sample. The binary uses XOR encryption to hide its command and control configuration. Perform static and dynamic analysis to extract the C2 domain and flag.

Learning Objectives

Apply reversing analysis techniques
Use professional security tools
Understand real-world attack scenarios
Document findings professionally

Tools You May Need

Ghidra or IDA for disassembly
x64dbg for debugging
Strings and hex editors

Getting Started

Review the challenge description carefully
Gather and examine all provided materials
Apply systematic analysis methodology
Document your findings as you progress
Submit the flag when discovered

Flag Format

All flags follow the format: ung{descriptive_text}

Good luck!

Hints

💡 Hint 1 (Click to reveal)

Start by examining the basic artifacts and evidence provided

💡 Hint 2 (Click to reveal)

Use industry-standard tools for this type of analysis

💡 Hint 3 (Click to reveal)

The flag follows the format ung{...} with descriptive text