An Analyst Is Alerted for a Malicious File Hash

question 14

Multiple Choice

An analyst is alerted for a malicious file hash. After analysis, the analyst determined that an internal workstation is communicating over port 80 with an external server and that the file hash is associated with Duqu malware. Which tactics, techniques, and procedures align with this analysis?

• A) Command and Control, Application Layer Protocol, Duqu
• B) Discovery, Remote Services: SMB/Windows Admin Shares, Duqu
• C) Lateral Movement, Remote Services: SMB/Windows Admin Shares, Duqu
• D) Discovery, System Network Configuration Discovery, Duqu

---

Definitions:

Specific Message

A communication that is clear, detailed, and aimed at conveying a precise point or information.

Pertinent Questions

Questions that are directly relevant to the topic or situation at hand.

Blackboard

A teaching and learning platform used by educational institutions for course management and virtual learning environments.

Paraphrasing

Restating in your own words what you think another person is saying.