An Analyst Is Alerted for a Malicious File Hash

question 14

Multiple Choice

An analyst is alerted for a malicious file hash. After analysis, the analyst determined that an internal workstation is communicating over port 80 with an external server and that the file hash is associated with Duqu malware. Which tactics, techniques, and procedures align with this analysis?

• A) Command and Control, Application Layer Protocol, Duqu
• B) Discovery, Remote Services: SMB/Windows Admin Shares, Duqu
• C) Lateral Movement, Remote Services: SMB/Windows Admin Shares, Duqu
• D) Discovery, System Network Configuration Discovery, Duqu

---

Definitions:

Presentation

A visual or verbal project designed to communicate information, ideas, or data effectively to an audience.

Order Getter

A salesperson whose primary responsibilities are identifying potential customers and engaging those customers in discussions to attempt to make a sale.

Sales Presentation

A promotional talk or pitch aiming to persuade potential buyers to purchase a product or service, often incorporating demonstrations or slides.

Environmental Achievement

The accomplishment of significant positive impacts on the environment through conservation efforts, pollution reduction, and sustainability practices.