2016-07-07 - TRAFFIC ANALYSIS EXERCISE - EMAIL ROULETTE

ASSOCIATED FILES:

ZIP files on this site are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

 

SCENARIO

It's time for another round of email roulette!  It'll be just like the film The Deer Hunter, except this exercise is much less emotionally shattering than the movie.


Shown above:  Christopher Walken's character in The Deer Hunter preparing to open a malicious email.

 

You have a pcap of infection traffic.  You also have six malicious emails.  Your task?  Figure out which of the six emails caused the infection traffic.  If you choose to do so, remember a proper write-up includes the date and time of the infection, and it also includes IP addresses, MAC addresses, host names, user names, and associated domains/IP addresses.


Shown above:  The six malicious emails.

 

ANSWER

 

Click here to return to the main page.