Training for ESDC at NUPS, Budapest [ ]
!!!WARNING!!! Some files may contain harmful piece of malware. Only download files when you are told to do so.
You can view the OilRig.afb file via the Center for Threat Informed Defense UI
Follow the Cyber Exercise PPT file
Learn about the threat Actor - OilRig (use the ppt above)
Note for Peter: Malicious files are available on the server
Use the LINK of „GGMS Overview.doc” (from GitHub) and have it analysed with VirusTotal (and Hybrid analysis). Do the same with the „SideTwist.exe” file
If it takes too long, use the public reports available:
Use the LINK of „b.exe” (from GitHub) and have it analysed with VirusTotal (and Hybrid analysis).
If it takes too long, use the public reports available:
Use the LINK of „contact.aspx” (from GitHub) and have it analysed with VirusTotal (and Hybrid analysis).
If it takes too long, use the public reports available:
Create a threat report about this threat actor!
Include:
- Executive summary
- Description
- IOCs
- TTPs
- Mitre ATT&CK Framework references
- Recommendations
Target Audience:
- Your SOC ppl