210-250 · Question #107
Which purpose of command and control for network aware malware is true?
The correct answer is C. It contacts a remote server for command and updates. Command and Control (C2) is the infrastructure and mechanism malware uses to communicate back to an attacker-controlled remote server to receive instructions and deliver stolen data.
Question
Which purpose of command and control for network aware malware is true?
Options
- AIt helps the malware to profile the host
- BIt takes over the user account
- CIt contacts a remote server for command and updates
- DIt controls and down services on the infected host
How the community answered
(15 responses)- B7% (1)
- C93% (14)
Why each option
Command and Control (C2) is the infrastructure and mechanism malware uses to communicate back to an attacker-controlled remote server to receive instructions and deliver stolen data.
Host profiling is a reconnaissance activity the malware may perform locally or report back via C2, but profiling the host is not the defining purpose of the C2 mechanism itself.
Taking over a user account describes credential theft or account hijacking, which is a separate technique that may occur before or after C2 is established, not the function of C2.
Malware with C2 capability establishes an outbound communication channel to a remote server controlled by the attacker, allowing the attacker to issue commands, push updates, configure payloads, and receive exfiltrated data from the compromised host - this bidirectional communication is the defining purpose of C2.
Stopping or disrupting services is a potential action an attacker might issue through C2, but it describes a sabotage outcome rather than the purpose of the C2 communication channel.
Concept tested: Command and Control (C2) malware communication purpose
Source: https://attack.mitre.org/tactics/TA0011/
Topics
Community Discussion
No community discussion yet for this question.