nerdexam
EC-Council

212-82 · Question #118

An employee was fired from his security analyst job due to misconduct. While leaving, he installed a Trojan server on his workstation at 172.30.20.75. As an ethical hacker, you are asked to identify…

The correct answer is D. EchoStrike. This practical question requires connecting to a specific Trojan server using provided tools and navigating its file system to find a particular VBScript file named "EchoStrike" in the 'Pictures' folder.

Submitted by renata2k· Mar 6, 2026Cloud Security Operations & Incident Response

Question

An employee was fired from his security analyst job due to misconduct. While leaving, he installed a Trojan server on his workstation at 172.30.20.75. As an ethical hacker, you are asked to identify and connect to the Trojan server and explore available files. Enter the name of the VBScript file located in the Pictures folder of the workstation. Hint: You can use one of the Ttojan client applications available at "Z:\CCT-Tools\CCT Module 01 Information Security Threats and Vulnerabilities\Remote Access Ttojans (RAT)" of Attacker Machine-1. (Practical Question)

Options

  • AB00m3rang
  • BReboundBlitz
  • CRecoil Wave
  • DEchoStrike

How the community answered

(34 responses)
  • A
    15% (5)
  • B
    6% (2)
  • C
    26% (9)
  • D
    53% (18)

Why each option

This practical question requires connecting to a specific Trojan server using provided tools and navigating its file system to find a particular VBScript file named "EchoStrike" in the 'Pictures' folder.

AB00m3rang

"B00m3rang" is not the name of the VBScript file found in the specified location on the target workstation.

BReboundBlitz

"ReboundBlitz" is not the name of the VBScript file found in the specified location on the target workstation.

CRecoil Wave

"Recoil Wave" is not the name of the VBScript file found in the specified location on the target workstation.

DEchoStrikeCorrect

To answer this question, an ethical hacker would use a Remote Access Trojan (RAT) client from the specified path, connect to the target workstation (172.30.20.75), and then browse to the 'Pictures' folder to locate the VBScript file named "EchoStrike".

Concept tested: Remote Access Trojan (RAT) usage and file system navigation

Topics

#trojan#RAT#ethical hacking#malware analysis#remote access

Community Discussion

No community discussion yet for this question.

Full 212-82 Practice