What information could you derive from any domain names and host IP addresses in the malware analysis report?

[TABS_R id=6660]

You discover several client machines are infected with malware that begins to make outbound calls (connection attempts) to a remote server after infection. You run a malware analysis tool.

What information could you derive from any domain names and host IP addresses in the malware analysis report?

• the next machine that will be infected
• destination of the callouts
• signature of the malware
• the first machine infected

Explanation:

[TABS_R id=6660]