| # | Student | Country | Points |
|---|---|---|---|
| 1 | JGutierrez |
|
5,998 |
| 2 | MIlin |
|
5,998 |
| 3 | VHegde |
|
3,453 |
| 4 | AKasnia |
|
3,043 |
| 5 | MHernáez |
|
2,203 |
| 6 | FShiniti |
|
1,696 |
| 7 | MFernandes |
|
1,102 |
| 8 | TSuarez |
|
886 |
| 9 | FRomero |
|
836 |
| 10 | KPuzikov |
|
377 |
| 11 | AWahid |
|
306 |
| 12 | MMachac |
|
250 |
| 13 | TSingh |
|
190 |
| 14 | BCumi |
|
140 |
| 15 | SPaul |
|
130 |
| 16 | BSabanilla |
|
100 |
| 17 | BYogesh |
|
90 |
| 18 | NBharat |
|
70 |
| 19 | YRAJKUMAR |
|
40 |
| 20 | SAnnapragada |
|
40 |
| 21 | ASzymanowska |
|
30 |
| 22 | GNilesh |
|
30 |
| 23 | MYadav |
|
20 |
| 24 | DBhatnagar |
|
20 |
| 25 | APramod |
|
10 |
| 26 | SWaseem |
|
10 |
| 27 | MHozaifa |
|
0 |
| 28 | GSingh |
|
0 |
| 29 | NBijalwan |
|
0 |
| 30 | NRam |
|
0 |
| 31 | LBetancourt |
|
0 |
| 32 | JEspinoza |
|
0 |
| 33 | OAsgaonkar |
|
0 |
| 34 | MShivnath |
|
0 |
| 35 | HNomul |
|
0 |
| 36 | PPanchami |
|
0 |
| 37 | SKhan |
|
0 |
| 38 | KAndure |
|
0 |
| 39 | HAhire |
|
0 |
| 40 | GKumari |
|
0 |
| 41 | SSoni |
|
0 |
| 42 | ASharma |
|
0 |
| 43 | SRaj |
|
0 |
| 44 | IGupta |
|
0 |
| 45 | DPandey |
|
0 |
| 46 | MUllah |
|
0 |
| 47 | GGovind |
|
0 |
| 48 | KSunil |
|
0 |
| Module 0: Windows Binaries | Points | Solved by | First solvers |
|---|---|---|---|
| Class 1 (Brief): Compiling & Building Executables | 10 | 174% | JGutierrez TSuarez VHegde |
| Class 2 (Brief): Windows Executables Format | 10 | 148% | JGutierrez TSuarez VHegde |
| Class 3 (Brief): Windows Loader | 10 | 141% | JGutierrez TSuarez VHegde |
| Class 4 (Brief): .NET Assemblies | 10 | 133% | JGutierrez TSuarez VHegde |
| Class 5 (Lab): Windows Binaries Example | 10 | 111% | JGutierrez TSuarez FRomero |
| Module 1: Dynamic Analysis | Points | Solved by | First solvers |
|---|---|---|---|
| Class 1 (Brief): Malicious Software 101 | 20 | 107% | JGutierrez TSuarez FRomero |
| Class 2 (Brief): Analysis Lab & Tools | 20 | 104% | JGutierrez TSuarez FRomero |
| Class 3 (Lab): Sandbox Analysis | 20 | 100% | JGutierrez TSuarez FRomero |
| Class 4 (Lab): Analysis Inside a Virtual Machine | 20 | 96% | TSuarez JGutierrez FRomero |
| Class 5 (Brief): Process and Network Monitoring | 30 | 96% | JGutierrez TSuarez FRomero |
| Module 2: Tools Arsenal | Points | Solved by | First solvers |
|---|---|---|---|
| Class 1 (Brief): PE Editors & Process Explorer | 30 | 89% | JGutierrez TSuarez FShiniti |
| Class 2 (Brief): WinDbg, IDA Pro & Qilinq | 30 | 85% | JGutierrez TSuarez FShiniti |
| Class 3 (Chall): PE Editors Exercise | 30 | 85% | TSuarez JGutierrez FShiniti |
| Class 4 (Lab): Debuggers & Disassemblers | 40 | 74% | JGutierrez TSuarez FShiniti |
| Class 4.1 (Chall): Debuggers & Disassemblers | 41 | 78% | JGutierrez TSuarez FShiniti |
| Class 5 (Lab): Wireshark 101 | 46 | 81% | TSuarez JGutierrez FShiniti |
| Class 5.1 (Lab): Fakenet 101 | 46 | 78% | JGutierrez TSuarez FShiniti |
| Class 5.2 (Lab): Inetsim 101 | 46 | 74% | JGutierrez TSuarez FShiniti |
| Module 4: Packers & Obfuscators | Points | Solved by | First solvers |
|---|---|---|---|
| Class 1 (Brief): Carnita Methodology | 50 | 70% | JGutierrez TSuarez FShiniti |
| Class 2 (Brief):Unpacking & Deobfuscation Strategy | 50 | 63% | JGutierrez FShiniti AKasnia |
| Class 3 (Lab): Unpacking UPX | 55 | 56% | JGutierrez FShiniti AKasnia |
| Class 3.1 (Lab): Unpacking UPX | 55 | 59% | JGutierrez AKasnia VHegde |
| Class 4 (Lab): Unpacking ASPack | 56 | 59% | JGutierrez VHegde AKasnia |
| Class 4.1 (Lab): Unpacking ASPack | 56 | 56% | JGutierrez VHegde AKasnia |
| Class 4.2 (Lab): Unpacking ASPack | 57 | 56% | JGutierrez VHegde AKasnia |
| Class 5 (Chall): Unpacking UPX your way | 65 | 52% | JGutierrez VHegde AKasnia |
| Class 6 (Chall): Unpacking for Flag | 75 | 52% | JGutierrez VHegde AKasnia |
| Module 5: Aniti-Malware Tricks | Points | Solved by | First solvers |
|---|---|---|---|
| Class 1 (Brief): Anti-Debugging | 68 | 52% | JGutierrez VHegde AKasnia |
| Class 2 (Brief): Anti-VM and Packers | 69 | 52% | JGutierrez VHegde AKasnia |
| Class 3 (Brief): Process Injection | 70 | 52% | JGutierrez VHegde AKasnia |
| Class 4 (Lab): Anti-Debugging Ticks | 71 | 44% | JGutierrez VHegde AKasnia |
| Class 4.1 (Chall): Patch the Binary | 75 | 44% | JGutierrez VHegde AKasnia |
| Class 4.2 (Chall): Find the Offset | 76 | 44% | JGutierrez VHegde AKasnia |
| Class 5 (Lab): Anti-Malware Ticks | 78 | 44% | JGutierrez VHegde AKasnia |
| Module 6: Process Injection | Points | Solved by | First solvers |
|---|---|---|---|
| Class 1 (Lab): CreateRemoteThread Technique | 75 | 44% | JGutierrez VHegde AKasnia |
| Class 2 (Lab): SetThreadContext Technique | 75 | 44% | JGutierrez VHegde AKasnia |
| Class 2.1 (Lab): SetThreadContext Technique | 75 | 48% | JGutierrez VHegde AKasnia |
| Class 3 (Chall): Find the Window | 80 | 44% | JGutierrez VHegde AKasnia |
| Class 3.1 (Lab): Fighting Process Injection with x32dbg | 85 | 41% | JGutierrez VHegde AKasnia |
| Class 4 (Chall): Find the Shellcode | 95 | 44% | JGutierrez VHegde AKasnia |
| Class 5 (Chall): Intercept the Shellcode | 100 | 44% | JGutierrez VHegde AKasnia |
| Module 8: Dissecting Infostealers like a BOSS | Points | Solved by | First solvers |
|---|---|---|---|
| Class 1 (Lab): Scripts 101 | 90 | 33% | JGutierrez MIlin |
| Class 2 (Lab): Dissecting BAT Downloader | 90 | 33% | JGutierrez MIlin |
| Class 3 (Lab): Dissecting Powershell Dropper with NeZa | 90 | 33% | JGutierrez MIlin |
| Class 3.1 (Lab): Dissecting Powershell Dropper | 90 | 33% | JGutierrez MIlin |
| Class 4 (Lab): Dissecting JavaScript Chrome Extension | 91 | 33% | JGutierrez MIlin |
| Class 4.1 (Lab): Dissecting JavaScript Chrome Extension | 91 | 33% | JGutierrez MIlin |
| Class 4.2 (Lab): Dissecting JavaScript Chrome Extension | 91 | 33% | JGutierrez MIlin |
| Class 5 (Chall): Dissecting Infostealer | 120 | 33% | JGutierrez MIlin |
| Class 5.1 (Chall): Dissecting the Plugin | 150 | 33% | JGutierrez MIlin |
| Module 9: Fighting Ransomware | Points | Solved by | First solvers |
|---|---|---|---|
| Class 1 (Lab): Intercepting RSA key with NeZa | 100 | 33% | JGutierrez MIlin |
| Class 2 (Lab): Intercepting AES key with NeZa | 100 | 33% | JGutierrez MIlin |
| Class 3 (Lab): Unhooking a locked machine with NeZa | 110 | 33% | JGutierrez MIlin |
| Class 4 (Lab): Reversing Ryuk Ransomware with IDA | 120 | 33% | JGutierrez MIlin |
| Class 4.1 (Lab): Recovering Ryuk Files with NeZa | 120 | 33% | JGutierrez MIlin |
| Class 5 (Chall): Restoring Locked Keyboard | 130 | 33% | JGutierrez MIlin |
| Class 6 (Chall): Recovering Encrypted Machine | 200 | 33% | JGutierrez MIlin |