The trend for slick looking infection file creation programs continues, with a tool designed to make servers for Botnets. I love taking screenshots of the files sitting in folders waiting to be activated, so let's get that part out of the way first, shall we?
...ah, there we go! With that out of the way, let's take a look at the application:
As with all these tools, it's as idiot proof as possible - enter your desired server, port and room then hit "Create EXE". Job done, and one custom made Server.exe is ready to roll. Of course, the creator advises binding the newly created file to help avoid detection.
Update functionality? Yep, it has that too:
Finally, this is yet another hacking tool that comes with a "chat" feature (although it's not actually functional yet). The desire for integrating chat features into hacking tools is something I wrote about here, not so long ago. Perhaps this one will be used to brag about how big their Botnets are or something.
At any rate, we detect this as AutoBot.
<strong>Research Summary Write-Up</strong>: <a href="http://www.vitalsecurity.org">Chris Boyd</a>, Director of Malware Research
<strong>Additional Research</strong>: Chris Mannon, FSL Senior Threat Researcher
...ah, there we go! With that out of the way, let's take a look at the application:
Update functionality? Yep, it has that too:
Finally, this is yet another hacking tool that comes with a "chat" feature (although it's not actually functional yet). The desire for integrating chat features into hacking tools is something I wrote about here, not so long ago. Perhaps this one will be used to brag about how big their Botnets are or something.
At any rate, we detect this as AutoBot.
<strong>Research Summary Write-Up</strong>: <a href="http://www.vitalsecurity.org">Chris Boyd</a>, Director of Malware Research
<strong>Additional Research</strong>: Chris Mannon, FSL Senior Threat Researcher
Leave a comment