Malware Attack Techniques

Question 1

What is a Malware Exploitation Technique?

Answer 1

Specific method by which malware code penetrates and infects a targeted system

Question 2

What does Fileless Malware do?

Answer 2

Creates a process in the system memory without relying on the local file system of the infected host in order to avoid detection by signature-based security software

Question 3

How does this modern malware work?

Answer 3

When a user accidentally clicks on a malicious link or opens a malicious file, the specific type of malware being installed is known as a stage one dropper or downloader

Question 4

What is Stage 1: Dropper or Downloader?

Answer 4

Piece of malware that is usually created as a lightweight shellcode that can be executed on a given system

Question 5

What is a Dropper?

Answer 5

Specific malware type designed to initiate or run other malware forms within a payload on an infected host

Question 6

What is a Downloader?

Answer 6

Retrieve additional tools post the initial infection facilitated by a dropper

Question 7

What is the primary function for a stage 1 dropper or downloader?

Answer 7

To retrieve additional portions of the malware code and to trick the user into activating it

Question 8

What is Shellcode?

Answer 8

Broader term that encompasses lightweight code meant to execute an exploit on a given target

Question 9

What is Stage 2: Downloader?

Answer 9

Downloads and installs a remote access Trojan to conduct command and control on the victimized system

Question 10

What is the “Actions on Objectives” phase?

Answer 10

Threat actors will execute primary objectives to meet core objectives like
■ data exfiltration
■ file encryption

Question 11

What is Concealment?

Answer 11

Used to help the threat actor prolong unauthorized access to a system by
■ hiding tracks
■ erasing log files
■ hiding any evidence of malicious activity

Question 12

What is “Living off the Land”?

Answer 12

■ A strategy adopted by many Advanced Persistent Threats and criminal organizations
■ The threat actors try to exploit the standard tools to perform intrusions