312-49V11: Computer Hacking Forensic InvestigatorDemo

Question

Your company has experienced an Emotet malware attack. During dynamic analysis in a sandboxed environment, you observe that the malware payload is absent from disk and appears to run only in memory. What makes this type of malware especially difficult to detect and analyze?

A It uses ransomware as a secondary payload.
B It is a form of fileless malware.
C It employs a polymorphic code.
D It utilizes a botnet for propagation.

Explanation

Fileless malware executes primarily in memory rather than relying on a malicious file stored on disk. Its lack of persistent disk artifacts can evade traditional file-based antivirus scanning and makes forensic collection and analysis more difficult.

312-49V11: Computer Hacking Forensic InvestigatorDemo

AstroTutor

Notes

Readiness

QuestionQ171

Community Discussion