Analyzing Possible Malware

30 minutes
  • 2 Learning Objectives

About this Hands-on Lab

In this lab exercise, we will take a look at how to use only tools to analyze a file to see if it has malware. We’ll also use `md5sum` to generate the MD5 hash of a file and submit the hash to the online resources as a second means of testing a suspicious file.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Download the suspicious file to your Downloads directory.
  1. Use a web browser and download the file from GitHub.
  1. Upload the file to https://www.virustotal.com to see if the file is a known malicious file.
Generate the MD5 hash of the downloaded file and save the hash in a file named`hash.txt` on the desktop.
  1. Run the command md5sum eicar_com.zip to generate the MD5 file hash.
    • Open gedit and copy/paste the hash into the file and save the file as hash.txt on the desktop.
  1. Upload the file hash to https://www.virustotal.com to see if the file is known to be malicious.

Additional Resources

The security team has been notified of a possible malware infection. You have been tasked with downloading this file and using Virus Total (https://www.virustotal.com) to analyze it to see if it is indeed malware.

To be sure, you'll need to upload the file itself to Virus Total and also run a search of Virus Total using the MD5 hash of the file. Save the MD5 hash of the file to a file on the desktop named hash.txt.

The suspect file has been placed on Github. (R. click and open in new tab to easily copy the full URL)

Connecting to the lab:

  1. Use VNC on your computer to connect to the public IP address of the instance on port 5901 (x.x.x.x:5901).
    • Log in with the username and password generated by the lab.

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?