Does it launch a secondary process? (e.g., cmd.exe , powershell.exe ).
A brief overview of what the file is intended to do (e.g., credential theft, downloader, or harmless training file). 2. Static Analysis Victoria Bravo.rar
Record the MD5 , SHA-1 , and SHA-256 hashes to uniquely identify the file. Does it launch a secondary process
List the files inside the RAR. Look for common malicious extensions like .exe , .vbs , .js , or double extensions like .pdf.exe . 3. Dynamic (Behavioral) Analysis Look for common malicious extensions like
Does it attempt to connect to a Command and Control (C2) server? Look for suspicious IP addresses or DNS requests.
However, if you are analyzing this file as part of a or digital forensics exercise, a standard write-up should include the following core sections: 1. Executive Summary File Name: Victoria Bravo.rar File Type: RAR Compressed Archive Threat Level: (e.g., High, Moderate, Low)
Check for creation dates, original filenames, and any digital signatures.
