GCIH · Question #72
You enter the netstat -an command in the command prompt and you receive intimation that port number 7777 is open on your computer. Which of the following Trojans may be installed on your computer?
The correct answer is D. Tini. Different Trojans listen on well-known default ports, and port 7777 is specifically associated with the Tini backdoor Trojan.
Question
You enter the netstat -an command in the command prompt and you receive intimation that port number 7777 is open on your computer. Which of the following Trojans may be installed on your computer?
Options
- ANetBus
- BQAZ
- CDonald Dick
- DTini
How the community answered
(43 responses)- A5% (2)
- B2% (1)
- C2% (1)
- D91% (39)
Why each option
Different Trojans listen on well-known default ports, and port 7777 is specifically associated with the Tini backdoor Trojan.
NetBus is a remote administration Trojan that listens on ports 12345 and 12346 by default, not port 7777.
QAZ is a Trojan that uses port 7597 as its default listening port and is known for spreading via the Notepad replacement technique, not port 7777.
Donald Dick is a backdoor Trojan associated with ports 23476 and 23477, not port 7777.
Tini is a minimal Windows backdoor Trojan that binds a command shell to port 7777/TCP, allowing an attacker to remotely execute commands on the compromised host - its use of port 7777 is a well-documented indicator of compromise used in CEH and forensic analysis curricula.
Concept tested: Trojan identification by default listening port
Topics
Community Discussion
No community discussion yet for this question.