HackTheBox – Sherlock – Lovely Malware
Challenge: https://app.hackthebox.com/sherlocks/Lovely%20Malware An employee at NeirCyber Security discovered a suspicious file named employee_benefits.exe on their desktop. The employee...
HackTheBox Sherlock: Subatomic
Challenge: https://app.hackthebox.com/sherlocks/Subatomic Introduction Forela is in need of your assistance. They were informed by an employee that their...
Malware Digitally Signed by Microsoft
While working on a sherlock from HackTheBox, I researched a tactic of threat actors abusing the Microsoft driver...
HackTheBox Sherlock – Heartbreaker-Continuum
Introduction Following a recent report of a data breach at their company, the client submitted a potentially malicious...
TryHackMe: Advent of Cyber 2024
I’ve spent the past few weeks tackling TryHackMe’s Advent of Cyber 2024. Some of my favorite challenges were:...
Portfolio Decommissioned
I’ve put a 302 redirect on my main site, ericturner.it, to redirect to blog.ericturner.it. You can still find...
S550 Mustang IPC Reverse Engineering
Note: This post was published 4 Feb 2024, but was based off of research and work completed back...
Top 200 Verbs in Italian
Ecco l’elenco dei 200 verbi più importanti in italiano. italiano English abitare to live in abituarsi ...
QAKBot Campaign 6Apr2023
Correspondence Sender Subject Attachment Name Attachment Hash (with VirusTotal link) clemke[@]e-chuppah[.]com RE: New Borrowers AK.pdf 9521bc74735d1300e182eaa98299023ba08acc9af17b85cc50b3938c99bd0b32 aschaden[@]shopbarbay[.]com FW:...
Trojan.Kryptic – 22 Mar 2023
Initial Email An email was discovered from comel[@]industry-mass[.]com. This site was created within the last 15 days.The email...