• University of Maryland, University College

• CMIT 321

Module 07 Malware Threats labs

Question 1.1.1:

The default port used by njRAT is___________.

5552

Question 1.1.2:

What is the IP address of the machine where njRAT is hosted?

10.10.10.10

10.10.10.16

10.10.10.19

10.10.10.13

Question 1.2.1:

What is the target machine in the above task?

Windows Server 2016

Question 1.2.2:

Name the file that has been shared with the target machine in the above task.

CryptedFile.exe

Question 1.3.1:

What is the default Server port used by ProRat?

5110

Question 1.3.2:

What is the IP address of the victim machine in this task?

10.10.10.16

Question 1.4.1:

What is the OS in which Theef Server is being executed?

Windows Server 2016

Parrot Security

Windows 10

Windows Server 2019

Question 1.4.2:

What is the OS in which Theef Client is being executed?

Windows 10

Windows Server 2019

Windows Server 2016

Ubuntu

Question 1.4.3:

What is the default port used by Theef?

6703

Question 2.1.1:

What is the Server Name provided in this task?

Server.exe

Question 3.1.1:

Name the virus that is analyzed using VirusTotal in this task.

tini.exe

Question 3.2.1:

What is the malicious file that is analyzed using BinText?

face.exe

Question 3.3.1:

What is the OS in which PEid is being executed?

windows 10

Question 3.5.1:

Which of the following files is analyzed using Dependency Walker?

Which of the following files is analyzed using Dependency Walker?

tini.exe

face.exe

snoppy.exe

MSN.exe

Question 3.6.1:

What is the name of the malware that is analyzed using IDA in this task?

face.exe