MSI

MSI is a blue team lab that falls under the Malware Analysis category and will cover the following subjects: CyberChef, ProcMon, URLHaus, Strings, VS Code, Advanced Installer, VirusTotal, Execution, Defense Evasion.

Learning Objectives

Analyze a malicious MSI installer by deconstructing its components, extracting embedded scripts, identifying C2 communication, and attributing the malware family.

Categories: Malware Analysis.

MITRE ATT&CK Tactics: Execution, Defense Evasion.

Tools: Advanced Installer, ProcMon, Strings, VirusTotal, URLHaus, CyberChef, VS Code.

Difficulty: medium.