Lab: Trojan Analysis — EHE

Objectives ▲

Execute the malware sample in sandbox

Identify the spawned malicious process

Detect the C2 connection (IP and port)

Find the dropped files in the system

Identify the registry persistence mechanism

Determine the C2 domain name

Classify the malware type (RAT)

Complete and submit the analysis report

Progress 0/8

IOC Legend ▲

                        PROC — Process events

                        NET  — Network connections

                        FILE — File system changes

                        REG  — Registry modifications

                        SYS  — System events

                        Click red/suspicious events

                        to mark them as IOCs.

All Events

Process

Network

File

Registry

Sandbox ready. Execute sample to begin analysis.

IOC Tracker 0 found

Indicators of Compromise

0 / 5

                                Click suspicious events in the monitor to flag them as IOCs. Identify all 5 to unlock the report form.
                            

Analysis Report

Malware Type

C2 IP Address

C2 Port

Persistence Mechanism

Primary Capabilities