Threat Actors: Mint Sandstorm – Campaign Analysis - Question 9

Question

In relation to the&nbsp;What named local variable holds the IP address from the for loop?I have been checking out the local varaibles but as per the for loop&nbsp;none of the variables typed in were correct.&nbsp;I am basically lost if none of the local variables observed in the for loop was observed to be the answer. I am wondering about what direction I should take in terms of digging deepering into how the IP is stored where even the variable&nbsp;ServIp was showcased to be incorrect and wsaData. &lt;-- leveraged Gemini for aid in parsing and understanding of the compiled code for ease of understanding and if there was anything I missed from the code, that may hint at a more indirect variable as well

kevinh · Accepted Answer

nevermind, I was suppose to look into the addresses themselves and not just the decompiled version of the code

Forum Discussion

Threat Actors: Mint Sandstorm – Campaign Analysis - Question 9

1 Reply

Featured Places

Help

Related Content

Malware Analysis: Tracking a LOLBins Campaign – Acquisition

Malware Analysis: Tracking a LOLBins Campaign – Examination

Malicious Document Analysis: Dropper Analysis

New CTI Lab: Lotus Blossom Notepad ++ Campaign: Analysis

Practical Malware Analysis: Static Analysis

Recent Discussions

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 7

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 3

Threat Actors: Mint Sandstorm – Campaign Analysis - Question 9

Ethereum: The Blockchain, Transactions, and Explorers

Microsoft Sentinel SOAR: Demonstrate Your Skills