$tealer

$tealer is a blue team lab that falls under the Malware Analysis category and will cover the following subjects: IDA, PEbear, PEiD, hashdb, CAPA, Execution, Stealth, Discovery, Command and Control.

Learning Objectives

Reverse engineer advanced stealer malware, identifying PE structure, dynamic API resolution, anti-analysis techniques, and RC4 string decryption to extract C2 IOCs using IDA Pro and CAPA.

Categories: Malware Analysis.

MITRE ATT&CK Tactics: Execution, Stealth, Discovery, Command and Control.

Tools: IDA, PEbear, PEiD, hashdb, CAPA.

Difficulty: insane.