Malware:ITX8060:2011:LAB1

Milestone: 30.11.2011 - 00:00

should be sent to course-malware(at)cert.ee Subject should be : "studentnumber".Firstname.Lab1 File mname Sould be "studentnumber".Firstname.Lab1.(txt.odt.pdf....)

If you did it together

Subject should be : "studentnumber".Firstname."studentnumber2".Firstname2.Lab1

There is 2 "computers" one of them are definitely infected second one i'm not sure about.

images for virtualbox can be downloaded

Bittorrent tracker

Win1

Win2

Http download

Win1

Win2

Assignment

Exercise can be done with partner

* Find out what is infecting win1
* Understand what  way the current  malware(s) are  dangerous to "your organisation" 
* If possible  clean win1
* Is win2  clean or has it problems ?
* If needed clean win2 

Deliverables

Questions that answers should be visible !.

*Summary -Your thought about exercise and sort summary
* Malware that infects machines 
  - Md5 has -if it possible and if not why 
  - Sha256 has -if it possible and if not why
  - Description how that malware is threat to "You organization" 
* Tools You used to find infection
* Tools You used clean machine 
* Where You found hints and how You did it  (you need to show Your thought
and communication process - write summary of it.)
* how would you grade you partner.

Pleas consider malware analysis report reminders