Malware-Viruses-and File Identification-CST 640

Malware-Viruses-and File Identification-Week 8 Discussion:

Malware is stored on by default on Kali in the /usr/share/windows-binaries directory.

Each one of you pick a file within this directory to discuss and provide your IR Team with detail about.

Tell us what the program does to a Windows system.

Also, please provide a hash of the file. Kali has several built in hashing utilities including md5hash and sha1sum.

If someone on your Forensic team has already picked the malicious file from the /usr/share/windows-binaries directory in Kali, pick a different piece of malware.

Answer Preview-Malware-Viruses-and File Identification-CST 640