Questions and exercises

Attempt the following exercise for gaining hands-on experience with network malware analysis:

1. Complete all exercises on Emotet Banking Trojan from https://www.malware-traffic-analysis.net/training-exercises.html
2. Complete challenge 10 and 11 from https://github.com/nipunjaswal/networkforensics/tree/master/Challenges?
3. Can you decrypt a ransomware through PCAP? If yes, how and under what conditions?
4. Most of the Command and Control servers have?
   1. Encryption
   2. Encoding
   3. Beaconing behavior
   4. None of the above
   5. All of the above

5. Most of the banking Trojans gets installed on the system through?
   1. Phishing
   2. Malspam
   3. Exploits
   4. Human errors
   5. All of the above
   6. None of the above