Kirish Ro'yxatdan o'tish

HackNow

PayNova Insidenti — Kill Chain Rekonstruksiyasi | HackNow

CTF Challenge'lar

HardForensics

PayNova Insidenti — Kill Chain Rekonstruksiyasi

4 iyul 2026

Ball

+1000

Statistika

5

Yechimlar

1000

Ball

First Blood

taichi

1 avg 2026

Tavsif

Bosqichlar

0/7

1

1. Razvedka — hujumchi tomonidan portalni skanerlash uchun ishlatilgan IP manzilini aniqlang

+100 ball

Oldingi bosqichni yeching

2

2. Qurollanish — VBA makrosida Chr() bilan yashiringan yuklab olish domenini dekodlang

+100 ballOldingi bosqich shart

Oldingi bosqichni yeching

3

3. Yetkazish — fishing xatni yuborgan soxta (lookalike) domenni aniqlang

+100 ballOldingi bosqich shart

Oldingi bosqichni yeching

4

4. Ekspluatatsiya — Sysmon'dagi kodlangan PowerShell buyrug'ini dekodlab, runtime domenni toping

+150 ballOldingi bosqich shart

Oldingi bosqichni yeching

5

5. O'rnatish — registry Run kaliti orqali doimiylashtirilgan zararli faylning SHA256 hash'ini aniqlang

+150 ballOldingi bosqich shart

Oldingi bosqichni yeching

6

6. C2 Aloqa — DNS so'rovlar orasidan haqiqiy davriy mayoq domenini va uning IP manzilini aniqlang

+200 ballOldingi bosqich shart

Oldingi bosqichni yeching

7

7. Maqsadga Yetish — eng katta hajmdagi uzatishga mos X-Sync-Meta header'ni dekodlab, o'g'irlangan fayl nomini aniqlang

+200 ballOldingi bosqich shart

Oldingi bosqichni yeching

Baholash

Muallif'ga xabar