Create an account

Very important

  • To access the important data of the forums, you must be active in each forum and especially in the leaks and database leaks section, send data and after sending the data and activity, data and important content will be opened and visible for you.
  • You will only see chat messages from people who are at or below your level.
  • More than 500,000 database leaks and millions of account leaks are waiting for you, so access and view with more activity.
  • Many important data are inactive and inaccessible for you, so open them with activity. (This will be done automatically)

0Day Forums Hacking & Exploits Antivirus & Protected [Scan Report]: Instagram Free Follower Tool v1.1

Thread Rating:
  • 287 Vote(s) - 3.4 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Options
[Scan Report]: Instagram Free Follower Tool v1.1

Offline necrophobia130


Valued member
***
Valued member
Posts: 0
Threads: 0
Joined: May 2021
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#1
06-06-2020, 11:57 AM
i coudn't find the original thread of the application, however, i've downloaded it to manually scan it

this application sends your hardware configuration to an ip (47.254.216.24:8989), checks if it is running in a VM & setups a rat on user login
[Image: w1rH44w.png]

Less important screenshots:

Hidden Content
You must

[To see links please register here]

or

[To see links please register here]

to view this content.


Setups RAT on login:
[Image: ldSeT27.png]

TcpConnection:
[Image: Cge8n0J.png]
i still have the original sample, dm me if you want it (i will not share it on 0day.red publically, don't want to get banned)

here is some tools i've made to decrypt some things, like the resources & strings

[To see links please register here]

[To see links please register here]


[To see links please register here]

[To see links please register here]

@mothered[/hide]
[/hide]
Reply

Offline arthrectomy738338


Valued member
***
Valued member
Posts: 0
Threads: 0
Joined: Nov 2022
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#2
06-06-2020, 02:06 PM
Excellent analysis Indeed.

Evidently, the file Is Infected with malicious Intent. Is

[To see links please register here]

the thread It relates to?
Reply

Offline stepladder27965


Valued member
***
Valued member
Posts: 1
Threads: 1
Joined: Feb 2020
Reputation: 0
Level: 1 [Level]
Total Points: 0
Rank 0 / 1
99% to upload Level
Rank
Activity 0 / 1
99% to upload your Rank
Activity
Experience 1
99% to upload Experience
Experience

Points: 50
#3
06-06-2020, 05:40 PM
Quote:(06-06-2020, 04:39 PM)mothered Wrote:

[To see links please register here]

Excellent analysis Indeed.

Evidently, the file Is Infected with malicious Intent. Is

[To see links please register here]

the thread It relates to?
yes indeed,thanks for finding the thread back
Reply

Offline taiwanati


Member
*
Member
Posts: 0
Threads: 0
Joined: Mar 2021
Reputation: 0
Level: inf [Level]
Total Points: inf
Rank nan / 1
100% to upload Level
Rank
Activity inf / 1
99% to upload your Rank
Activity
Experience nan
100% to upload Experience
Experience

Points: 50
#4
06-07-2020, 01:02 AM
Quote:(06-06-2020, 08:39 PM)miso Wrote:

[To see links please register here]

Quote: (06-06-2020, 04:39 PM)mothered Wrote:

[To see links please register here]

Excellent analysis Indeed.

Evidently, the file Is Infected with malicious Intent. Is

[To see links please register here]

the thread It relates to?
yes indeed,thanks for finding the thread back
Just wanted to make sure prior to taking action.

I've removed It from the said thread, and action has been taken accordingly against the OP.
Once again, good work with your analytical reports.
Reply

« Next Oldest
Next Newest »


Forum Jump:


Users browsing this thread:
1 Guest(s)

©0Day  2016 - 2023 | All Rights Reserved.  Made with    for the community. Connected through