nerdexam
GIAC

GCIH · Question #1

Which of the following applications is an example of a data-sending Trojan?

The correct answer is D. eBlaster. eBlaster is a data-sending Trojan that silently captures user activity and transmits it to a remote recipient, distinguishing it from RATs, generators, and security-killer Trojans.

Malware Analysis & Advanced Persistent Threats

Question

Which of the following applications is an example of a data-sending Trojan?

Options

  • ASubSeven
  • BSenna Spy Generator
  • CFirekiller 2000
  • DeBlaster

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    4% (1)
  • D
    88% (22)

Why each option

eBlaster is a data-sending Trojan that silently captures user activity and transmits it to a remote recipient, distinguishing it from RATs, generators, and security-killer Trojans.

ASubSeven

SubSeven (Sub7) is a Remote Access Trojan that gives an attacker full interactive remote control over the victim machine, not primarily designed to exfiltrate and send data logs.

BSenna Spy Generator

Senna Spy Generator is a Trojan-builder utility used to create custom Trojans, and is itself a creation tool rather than an active data-sending Trojan.

CFirekiller 2000

Firekiller 2000 is a security-software-killer Trojan designed to terminate antivirus and firewall processes on the target, not to capture or transmit user data.

DeBlasterCorrect

eBlaster is a data-sending Trojan that covertly records keystrokes, emails, websites visited, and chat messages on the infected system, then automatically forwards these logs to a predefined email address. It runs hidden in the background without alerting the victim. This behavior - collecting and transmitting stolen data to a remote party - is the defining characteristic of the data-sending Trojan category.

Concept tested: Data-sending Trojan classification and identification

Source: https://attack.mitre.org/techniques/T1020/

Topics

#Trojan types#data-sending Trojan#malware classification#eBlaster

Community Discussion

No community discussion yet for this question.

Full GCIH Practice