Valid 312-50v13 Dumps shared by ExamDiscuss.com for Helping Passing 312-50v13 Exam! ExamDiscuss.com now offer the newest 312-50v13 exam dumps, the ExamDiscuss.com 312-50v13 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 312-50v13 dumps with Test Engine here:
Mason, a professional hacker, targets an organization and spreads Emotet malware through malicious script. After infecting the victim's device. Mason further used Emotet to spread the infection across local networks and beyond to compromise as many machines as possible. In this process, he used a tool, which is a self- extracting RAR file, to retrieve information related to network resources such as writable share drives. What is the tool employed by Mason in the above scenario?
Correct Answer: D
https://us-cert.cisa.gov/ncas/alerts/TA18-201A Currently, Emotet uses five known spreader modules: NetPass.exe, WebBrowserPassView, Mail PassView, Outlook scraper, and a credential enumerator. Credential enumerator is a self-extracting RAR file containing two components: a bypass component and a service component. The bypass component is used for the enumeration of network resources and either finds writable share drives using Server Message Block (SMB) or tries to brute force user accounts, including the administrator account. Once an available system is found, Emotet writes the service component on the system, which writes Emotet onto the disk. Emotet's access to SMB can result in the infection of entire domains (servers and clients).