Vellore Institute of Technology

• CSE 3502

• Utilize the below given web links and perform the malware analysis Malware Analysis Tools • https://www.virustotal.com/gui/home/upload • https://www.hybrid-analysis.com Malware Database • https://bazaar.abuse.ch/browse/ 1. Use five different files and URLs whether it is infected or not. Also present all its analysis. 2. Utilise any five malware files and present its analysis. 3. Document your understanding and interpretation. 4. Create a consolidated report for all the scans. 5. Consolidate all the PDFs and Upload the document. https://www.virustotal.com/gui/home/upload 1. First file: Malicious Hash: 32cfc90d2bddde7b142c716f8e79b0ada3ab6968c25ccc07d2708b27592753d5 Threat Intelligence: 76% This is a .dll file. Analysis: As per the report obtained from Virustotal, the file contains malware and which contacts known malicious URLs and IP addresses. It tries to hide its tracks by creating a hidden window. It tries attacking the NTFS file attributes. 2. Second File: Malicious Hash: 9e767c4f489eeeed91e9d2febf8640f875211857ddc4406cab4c7b5ddda084a7 Threat Intelligence: 33% This is a .exe file