MALWARE_BEHAVIOR_LAB_V1.0
Educational Simulation: Incident Analysis
system_monitor — analysis
Network Activity
Connecting to:
192.168.10.254
(Unknown External IP)
System Integrity
Registry Modified:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> Initializing behavior monitoring...
Execute Dynamic Analysis
Based on the analysis, what indicates malware presence?
Validate
Malware often exhibits indicators of compromise (IoC) such as establishing persistence via the registry and beaconing to command-and-control (C2) servers.