Vellore Institute of Technology

• CSE 3502

• Question: Utilize the below given web links and perform the malware analysis Malware Analysis Tools https://www.virustotal.com/gui/home/upload https://www.hybrid-analysis.com Malware Database https://bazaar.abuse.ch/browse/ 1. Use five different files and URLs whether it is infected or not. Also present all its analysis. 2. Utilise any five malware files and present its analysis. 3. Document your understanding and interpretation. 3. Create a consolidated report for all all the scans. 4. Consolidate all the PDFs and Upload the document. 1. First file: Malicious Hash: 32cfc90d2bddde7b142c716f8e79b0ada3ab6968c25ccc07d2708b27592753d5 Threat Intelligence: 76% This is a .dll file. Analysis: As per the report obtained from Virustotal, the file contains malware and which contacts known malicious URLs and IP addresses. It tries to hide its tracks by creating a hidden window. It tries attacking the NTFS file attribute