Malware:ITX8060:2011:LAB1
Find out what is wrong.
Milestone: 30.11.2011 - 00:00
should be sent to course-malware(at)cert.ee Subject should be : "studentnumber".Firstname.Lab1 File mname Sould be "studentnumber".Firstname.Lab1.(txt.odt.pdf....)
If you did it together
Subject should be : "studentnumber".Firstname."studentnumber2".Firstname2.Lab1
There is 2 "computers" one of them are definitely infected second one i'm not sure about.
images for virtualbox can be downloaded
Bittorrent tracker
Http download
Assignment
Exercise can be done with partner
* Find out what is infecting win1 * Understand what way the current malware(s) are dangerous to "your organisation" * If possible clean win1 * Is win2 clean or has it problems ? * If needed clean win2
Deliverables
Questions that answers should be visible !.
*Summary -Your thought about exercise and sort summary * Malware that infects machines - Md5 has -if it possible and if not why - Sha256 has -if it possible and if not why - Description how that malware is threat to "You organization" * Tools You used to find infection * Tools You used clean machine * Where You found hints and how You did it (you need to show Your thought and communication process - write summary of it.) * how would you grade you partner.
Pleas consider malware analysis report reminders