Exam 212-82 Topic 20 Question 119 Discussion

Actual exam question for ECCouncil's 212-82 exam
Question #: 119
Topic #: 20
RAT has been setup in one of the machines connected to the network to steal the important Sensitive corporate docs located on Desktop of the server, further investigation revealed the IP address of the server 20.20.10.26.
Initiate a remote connection using thief client and determine the number of files present in the folder.
Hint: Thief folder is located at: Z:\CCT-Tools\CCT Module 01 Information Security Threats and Vulnerabilities\Remote Access Trojans (RAT)\Thief of Attacker Machine-1.

Suggested Answer: C Vote an answer

3 is the number of files present in the folder in the above scenario. A RAT (Remote Access Trojan) is a type of malware that allows an attacker to remotely access and control a compromised system or network. A RAT can be used to steal sensitive data, spy on user activity, execute commands, install other malware, etc. To initiate a remote connection using thief client, one has to follow these steps:
* Navigate to the thief folder located at Z:\CCT-Tools\CCT Module 01 Information Security Threats and Vulnerabilities\Remote Access Trojans (RAT)\Thief of Attacker Machine-1.
* Double-click on thief.exe file to launch thief client.
* Enter 20.20.10.26 as IP address of server.
* Enter 1234 as port number.
* Click on Connect button.
* After establishing connection with server, click on Browse button.
* Navigate to Desktop folder on server.
* Count number of files present in folder.
The number of files present in folder is 3, which are:
* Sensitive corporate docs.docx
* Sensitive corporate docs.pdf
* Sensitive corporate docs.txt

by Beck at Mar 14, 2025, 03:57 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

Contact Us

If you have any question please leave me your email address, we will reply and send email to you in 12 hours.

Our Working Time: ( GMT 0:00-15:00 ) From Monday to Saturday

Support: Contact now 

日本語 Deutsch 繁体中文 한국어