+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Decompiled a scam JAR file (/showthread.php?tid=5737442)
Decompiled a scam JAR file - Briceag - Oct 15, 2017
Hello!
So i used a online service to decompile a scam JAR file i've got on my email :
Here's what's inside : https://i.imgur.com/EQb3cWy.png
All the files have the same short script: https://i.imgur.com/IH7ZB3Y.jpg
Any idea what this is?
* - SIM-3420445 - Oct 15, 2017
Images are blur , cant see them properly ! Could you take screenshot and upload again ?
* - Asdethprime - Oct 15, 2017
The code is importing a custom module , something that may be developed by the malware creators called Folonej and using their own sub-modules so this makes it hard to decode what they are doing.
If this is a malware, could you please send me a copy I would really appreciate it.
Java isn't my speciality, but I'll see what I can do. Being completely honest, the reason I am asking a copy is more for myself because I like trying to understand what a malware does and how it does it by running on a VM. Just something I like, not a professional at this so don't expect a high success rate from my side.