Malware:ITX8060:2011:LAB3 - Redigeerimiste ajalugu

Toomasl: /* Milestone: 11.12.2011 - 00:00 */

2011-12-06T17:13:40Z

Milestone: 11.12.2011 - 00:00

←Vanem redaktsioon		Redaktsioon: 6. detsember 2011, kell 19:13
6. rida:		6. rida:
	* Download [https://sim.cert.ee/hw/download.pcap download.pcap]		* Download [https://sim.cert.ee/hw/download.pcap download.pcap]
	* Find malware download in this pcap and Extract malware or malwares		* Find malware download in this pcap and Extract malware or malwares
	* find out where malware was ~~downloded~~ from		* find out where malware was downloaded from
	* What malware , malwares changes in system.		* What malware , malwares changes in system. (drought process of static and or Dynamic analysis)
	* C&C Names and ~~aadress~~.		* C&C Names and address.
	* document the process also Where You found hints and how exactly You did it (you need to show Your thought		* document the process also Where You found hints and how exactly You did it (you need to show Your thought
	and communication process - please write a summary of it.)		and communication process - please write a summary of it.)
17. rida:		17. rida:
	should be sent to course-malware(at)cert.ee Subject should be : "studentnumber".Firstname.Lab3 File mname Sould be "studentnumber".Firstname.Lab3.(txt.odt.pdf....)		should be sent to course-malware(at)cert.ee Subject should be : "studentnumber".Firstname.Lab3 File mname Sould be "studentnumber".Firstname.Lab3.(txt.odt.pdf....)

	~~Documentation~~ is crucial.		Documenting in sensible manner is crucial !

Toomasl: /* Analyse an malware */

2011-12-06T17:11:49Z

Analyse an malware

←Vanem redaktsioon		Redaktsioon: 6. detsember 2011, kell 19:11
1. rida:		1. rida:
	== Analyse an malware ==		== Analyse an malware ==

	==== Milestone: 08.12.2011 - 00:00 ====		==== Milestone: 11.12.2011 - 00:00 ====


14. rida:		14. rida:

	consider [http://zeltser.com/reverse-malware/malware-analysis-report-template.mm malware analysis report reminders ]		consider [http://zeltser.com/reverse-malware/malware-analysis-report-template.mm malware analysis report reminders ]

			should be sent to course-malware(at)cert.ee Subject should be : "studentnumber".Firstname.Lab3 File mname Sould be "studentnumber".Firstname.Lab3.(txt.odt.pdf....)

			Documentation is crucial.

Toomasl: /* Milestone: 08.12.2011 - 00:00 */

2011-11-30T17:14:56Z

Milestone: 08.12.2011 - 00:00

←Vanem redaktsioon		Redaktsioon: 30. november 2011, kell 19:14
9. rida:		9. rida:
	* What malware , malwares changes in system.		* What malware , malwares changes in system.
	* C&C Names and aadress.		* C&C Names and aadress.
	* document the process - Where You found hints and how exactly You did it (you need to show Your thought		* document the process also Where You found hints and how exactly You did it (you need to show Your thought
	and communication process - please write a summary of it.)		and communication process - please write a summary of it.)
	* Write an intsident raport.		* Write an intsident raport.

	consider [http://zeltser.com/reverse-malware/malware-analysis-report-template.mm malware analysis report reminders ]		consider [http://zeltser.com/reverse-malware/malware-analysis-report-template.mm malware analysis report reminders ]

Toomasl: /* Milestone: 08.12.2011 - 00:00 */

2011-11-30T16:58:43Z

Milestone: 08.12.2011 - 00:00

←Vanem redaktsioon		Redaktsioon: 30. november 2011, kell 18:58
5. rida:		5. rida:

	* Download [https://sim.cert.ee/hw/download.pcap download.pcap]		* Download [https://sim.cert.ee/hw/download.pcap download.pcap]
	* Find malware download in this pcap and Extract malware		* Find malware download in this pcap and Extract malware or malwares
	* find out where malware was downloded from		* find out where malware was downloded from
	* What malware changes in system.		* What malware , malwares changes in system.
	* C&C Names and aadress.		* C&C Names and aadress.
	* document the process - Where You found hints and how exactly You did it (you need to show Your thought		* document the process - Where You found hints and how exactly You did it (you need to show Your thought

Toomasl: /* Milestone: 08.12.2011 - 00:00 */

2011-11-30T16:41:58Z

Milestone: 08.12.2011 - 00:00

←Vanem redaktsioon		Redaktsioon: 30. november 2011, kell 18:41
9. rida:		9. rida:
	* What malware changes in system.		* What malware changes in system.
	* C&C Names and aadress.		* C&C Names and aadress.
	* document the process		* document the process - Where You found hints and how exactly You did it (you need to show Your thought
			and communication process - please write a summary of it.)
	* Write an intsident raport.		* Write an intsident raport.

	consider [http://zeltser.com/reverse-malware/malware-analysis-report-template.mm malware analysis report reminders ]		consider [http://zeltser.com/reverse-malware/malware-analysis-report-template.mm malware analysis report reminders ]

Toomasl – 30. november 2011, kell 16:40

2011-11-30T16:40:52Z

Uus lehekülg

== Analyse an malware ==

==== Milestone: 08.12.2011 - 00:00 ====

* Download [https://sim.cert.ee/hw/download.pcap download.pcap]
* Find malware download in this pcap and Extract malware
* find out where malware was downloded from
* What malware changes in system.
* C&C Names and aadress.
* document the process
* Write an intsident raport.

consider [http://zeltser.com/reverse-malware/malware-analysis-report-template.mm malware analysis report reminders ]