Forum Discussion
SOC Analyst – Advanced / Malware Analysis / CookieMiner
The task 6 says "Use strings to recover a Base64 string from the memory image and decode it."
The output of strings vs memory image produces a file with about 4M strings, typical grep for base64 "compatibility" reduces the size but not drastically.
Is there a chance to get a hint on how to proceed?
All good, the answer is in the question "Use strings to recover a Base64 string from the memory image and decode it.". Just needed a night to clear my mind.
3 Replies
- SamDickison
Community Manager
Hmm, I haven't done that one but could it help to sort/search for unique, long strings? Likely to be malicious.
I can alway see if anyone here has completed it. They can probably help.
All good, the answer is in the question "Use strings to recover a Base64 string from the memory image and decode it.". Just needed a night to clear my mind.
- SamDickison
Nice. Sleep does wonderful things.
