Kerberos | Malware: Lecture 9

Question 1

Virus

Answer 1

• Virus (needs host), embeds itself with an executable host .exe etc, when host run, malware run.
• Inserts a marker, mutex.

Question 2

Virus

Answer 2

• Metamorphic
  The morphing of code to change signature
• Polymorphic
  Fetch from CNC server to decrypt the code

Question 3

Worms

Answer 3

• Caring payload or attack tools, password cracker

- Auto replicate without host

Question 4

Trojan

Answer 4

• Hides inside program
• Targetted virus, do not replicate
• Stealth, or spy so needs to remind hidden