Using the pcap file: https://cs6035.s3.amazonaws.com/MITM/mitm_spring2024.pcap

1. Please give answers to following questions.

2. Please provide step by step guidance about how to use wireshark to find those answers. For example, which filter to use, click which button and open which conversation etc. I need a full explanation, Not just the answers.

3. I have asked two tutors and they give me completely DIFFERENT and WRONG answers. Please make sure to open the pcap file with Wireshark and give correct answers.

Thanks in advance and I will leave a good rating if the answers make sense.

Task 2.1

• One of the hackers transfers a file to another hacker, after confirming their identity. What is the name of the file? (Including extension
  • Example:somefile.extension

Task 2.2

• It seems that the file transferred is encrypted. What encryption method or algorithm was used to encrypt the file? (Just the 3-letter name)
  • Example:something

Task 2.3

• If you decrypt and run the file, you'll get a unique hash based on your GTID(903542399). What is the hash generated?
  • Example:a123242342342342342934234