Malware Research

03 Aug 2024 21:57

greetings friends, malware sample request, 7d5b6bcc9b93aedc540e76059ee27841a96acb9ea74a51545dfef18b0fcf5b57, 6fc672288e68146930b86c7a3d490f551c8d7a7e8ba3229d64a6280118095bea, 'ad9044d9762453e2813be8ab96b9011efb2f42ab72a0cb26d7f98b9bd1d65965' thank you so much!

Malware Research

03 Aug 2024 14:18

/warn add context to the link and remove tracking

Malware Research

03 Aug 2024 14:14

It is a somewhat modular Trojan. If I remember correctly, the server injects a few DEX modules on first request to implement additional commands for uploading or downloading files on the device, exfiltrating SMS data, getting contact list or enabling the microphone, among other things.

Malware Research

03 Aug 2024 14:03

You could check if the "protocol" depicted in these posts still applies. "Packets" are formed by two ASCII-encoded length values (i.e., you see "510" instead of hex 01 FE in a network trace), each one followed by a null byte, and then two gzipped blobs of data (starting with hex 1F 8B) which have the specified lengths. Connection transport should be ordinary TCP over an arbitrary port number.

https://insinuator.net/2022/09/spymax-the-android-rat-and-it-works-like-that/
https://www.stratosphereips.org/blog/2021/2/26/dissecting-a-rat-analysis-of-the-spymax

Malware Research

03 Aug 2024 10:39

I often use the Medusa framework (which depends on Frida) to intercept and analyze how the malware app handles encrypted JSON objects sent by a fake C2. Maybe Medusa can intercept other kinds of C2 commands as well. Will look into it later.

Malware Research

03 Aug 2024 00:35

Hi team! I'm looking for data breach by domain, what do you recommend?

Malware Research

02 Aug 2024 12:41

I think I can only recall sandboxes have it

as for getting it out, not really sure. the APIs may allow that info to be queried, or no

Malware Research

02 Aug 2024 12:29

/warn read rules and use english for communication

Malware Research

02 Aug 2024 09:26

Any free websites/feed available where latest malwares are mapped with mitre attack framework along with their other attributes like impact, domains/IP's used etc...

Malware Research

01 Aug 2024 16:48

User Anil has 1/3 warnings; be careful!
Reason:
add a description to links

Malware Research

01 Aug 2024 15:55

Device is 14 pro max

Malware Research

01 Aug 2024 05:49

And it’s by pailra1n

Malware Research

01 Aug 2024 05:04

Can anyone tell me how to hack android over wan without ngrok and i can gain access again using kali linux

Malware Research

01 Aug 2024 02:58

checkra1n does not support 17

Malware Research

31 Jul 2024 18:40

Hello , did anyone do a jailbreak to ios 17.5.1 I need it to take a full filesystem image then analyze it to see if its infected or not

Malware Research

03 Aug 2024 14:18

User Anil has 2/3 warnings; be careful!
Reason:
add context to the link and remove tracking

Malware Research

03 Aug 2024 14:15

https://www.linkedin.com/pulse/how-do-you-use-threat-modeling-security-testing-your-anil-7xqyf/?trackingId=JGAQH%2FLQT3SPyZiJT7YJ%2Bw%3D%3D

Malware Research

03 Aug 2024 14:06

It try to connect via TCP - sends heartbeat, but not establish full connection with C2. Main problem i cant manage installed malware in admin console to make other activities like open file manager or use camera

Malware Research

03 Aug 2024 11:51

Hi Guys and Girls,
I am a 3yr exp Blue team professional, and now looking to start malware analysis.
Any guidance is appreciated.

Malware Research

03 Aug 2024 08:50

https://www.malware-traffic-analysis.net

Malware Research

02 Aug 2024 12:58

Hi all. Has anyone analyzed spymax android rat? I'm trying to trick a malicious apk by simulating C2 in my virtual machine and reconfigured network. the virus tries to initiate a connection with the server, but does not fully establish it, that is, it is not possible to reveal the full functionality of the virus.
The main goal is to dump malicious traffic while the virus is running and reproducing remote actions on the phone. Please advise what I can try?

Malware Research

02 Aug 2024 12:29

User Hamed has 1/3 warnings; be careful!
Reason:
read rules and use english for communication

Malware Research

02 Aug 2024 12:23

فی کی داره بفرسته bnb در حد چند سنت

Malware Research

01 Aug 2024 17:45

don't update and wait for about 2 years and there MIGHT be a jailbreak for that version and device

Malware Research

01 Aug 2024 16:09

https://www.linkedin.com/pulse/welcome-cybersentinel-gladiator-stay-ahead-patil-%E1%96%B4e%E1%92%AA%E1%92%AAo%E1%97%AF-s%E1%91%ADot%E1%92%AAig%E1%95%BCt-4lc7f/?trackingId=Pc4xoQi8RzajzEne4ffA7g%3D%3D

Malware Research

01 Aug 2024 07:26

New FedBan
Fed: Libra's Empire
FedAdmin: Libra
User: Unknown Mr
User ID: 6728884712
Reason: no skids

Malware Research

01 Aug 2024 05:49

Only 16.x is supported

Malware Research

01 Aug 2024 03:20

haven't been in jailbreaking for a while. does checkra1n not support every single version? if it's not maintained im sure there is a fork of it which does support ios 17.x

Malware Research

01 Aug 2024 02:12

if a11 or under checkra1n else ur out of luck

Malware Research

31 Jul 2024 09:50

You mean have I downloaded any samples?