2017-04-21 - TRAFFIC ANALYSIS EXERCISE - DOUBLE TROUBLE

NOTICE:

ASSOCIATED FILES:

 

SCENARIO

Marcus Dunham and Marion Dunham are brothers who work at their father's business, Dunham Hills Mortuary.  They've shared everything since childhood, and that trend continued as they became adults.  For example, at the mortuary, they share a joint email address named dunhambrothers@dunhamhillsmortuary[.]com.

The brothers have gotten into plenty of trouble over the years.  Due to their mischievious ways, Marcus and Marion earned the knickname "Double Trouble."  Accidents always happen in pairs whenever the brothers are around.


Shown above:  They think they're as cool as Terence Hill and Bud Spencer, but they're not.

 

Today is no exception for "Double Trouble," because both brothers infected their computers within minutes of each other.

This presents a puzzle, because both were infected shortly after checking their joint email account.  Now it's time to put your traffic analysis skills to work!  You have pcaps of the infection traffic from each brother's computer.  You also have 9 malicious emails that were sent to dunhambrothers@dunhamhillsmortuary[.]com during the past 2 to 3 weeks.

 

YOUR TASK

Your task?  Figure out which email was used to infect which computer.  After all, how hard can that be?

 

ANSWERS

 

Click here to return to the main page.