Post

PowerShell Analysis - Keylogger

Hi everyone

As always let’s find out what it is

Keylogger is the action of recording (logging) the keys struck on a keyboard, typically covertly, so that a person using the keyboard is unaware that their actions are being monitored.

Don’t ignore the warning

image

What is the SHA256 hash value for the PowerShell script file? (1 points)

image

e0b7a2ad2320ac32c262aeb6fe2c6c0d75449c6e34d0d18a531157c827b9754e

What email address is used to send and receive emails? (1 points)

image

chaudhariparth454@gmail.com

What is the password for this email account? (2 points)

2 questions are too easy .-.

yjghfdafsd5464562!

What port is used for SMTP? (2 points)

image

587

What DLL is imported to help record keystrokes? (2 points)

image

user32.dll

What directory is the generated txt file put in? (2 points)

image

temp\keylogger.txt

goodbye, thank you for reading until now //~//

This post is licensed under CC BY 4.0 by the author.