Malware Propagation Techniques and Indicators EHE Practice Questions (Page 7)

Questions 31–31

1. 31expert · hard

   A security analyst is reviewing an incident where a user visited a compromised website and the browser automatically downloaded and executed a file without user interaction. The malware then created a scheduled task and began making outbound connections to a C2 server. The user reports that the computer is now running slowly. Which propagation technique and indicators are present?

   • ADrive-by download as the propagation technique, with a system indicator (the scheduled task), a network indicator (the C2 connection), and a behavioral indicator (the slowdown).
   • BWorm exploiting a browser vulnerability as the propagation technique, with a network indicator (the scheduled task) and a behavioral indicator (the slowdown).
   • CEmail attachment as the propagation technique, with a system indicator (the slowdown) and a network indicator (the C2 connection).
   • DTrojan disguised as a legitimate program as the propagation technique, with a system indicator (the C2 connection) and a behavioral indicator (the scheduled task).
   Reveal Solution Discussion Select an answer first