Unit 42 Wireshark Quiz, January 2023
title: “Unit 42 Wireshark Quiz, January 2023” date: 2025-06-11T12:32:26+03:00 section: “security” categories: [“security”] title: Wireshark Malware Analysis date: 2025-02-7 author: Nicos draft: false tags: Quiz Question Review the pcap and answer the following questions for this month’s Unit 42 Wireshark quiz:
When did the malicious traffic start in UTC? based on the first DNS interaction we can see the ip 192.168.1.27 What is the victim’s IP address? by visiting the statistics part of wireshark and going to the conversation section and selecting ipv4 you can see that ip addr 192.