VIT University Vellore

• SELECT EEE 201

• Ex No: 5A Malware Analysis Utilize the below given web links and perform the malware analysis Malware Analysis Tools • https://www.virustotal.com/gui/home/upload • https://www.hybrid-analysis.com Malware Database • https://bazaar.abuse.ch/browse/ 1. Use five different files and URLs whether it is infected or not. Also presentall its analysis. 2. Utilise any five malware files and present its analysis. 3. Document your understanding and interpretation. 3. Create a consolidated report for all all the scans. 4. Consolidate all the PDFs and Upload the document. School of Computer Science and Engineering CSE3502-ISM LAB EXERCISE WINTER SEMESTER 2022-2023 Slot L7 + L8 Ex. 5B: Installing and Configuring SNORT Intrusion Detection System Step by Step Process: 1. Download SNORT from https://www.snort.org/downloads 2. Install npcap in your system 3. https://npcap.com/#:~:text=Downloading%20and%20Installing%20N pcap%20Free%20Edition&text=Simply%20run%20the%20executable %20installer,documented%20in%20the%20Npcap%20Changelog 4. Download the SNORT rules w.r.to SNORT version downloaded from the above website 5. Unzip and Replace the rule folder to C:\Snort\rules 6. Replace the rule folder to C:\Snort\preproc_rules 7. Open cmd and ipconfig to find the IP address of the system: 198.168.29.82/24, subnet mask: 255.255.255.0 8. Go to the SNORT installed folder C:\Snort\etc, open Snort.config using notepad++ or notepad 9. Do the following changes in snort.config file