MRT-X HF Malware Hunters - ? Exposing Dangerous Downloads ?

[MRT-X] HF Malware Hunters - ? Exposing Dangerous Downloads ? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: White Hat Hacking (https://hackforums.net/forumdisplay.php?fid=400)
+---- Thread: [MRT-X] HF Malware Hunters - ? Exposing Dangerous Downloads ? (/showthread.php?tid=6276795)

Pages: Pages 1 2

HF Malware Hunters - ? Exposing Dangerous Downloads ? - Bastille - Aug 3, 2024

🆕 Latest additions ! 🆕

05/18/2025 | Arkei Stealer Cracked, SFX packed 🗃️ : https://hackforums.net/showthread.php?tid=6298421
05/17/2025 | ZeroTrace Stealer SFX packed 🗃️ : https://hackforums.net/showthread.php?tid=6298353
04/24/2025 | Hidden Wiki Scam🧅 : https://hackforums.net/showthread.php?tid=6296845
04/21/2025 | Fake Mailer ✉️ : https://hackforums.net/showthread.php?tid=6296631

🧪 Malware Analysis Corner 🧪

After spending a few years helping forum members with security-related issues, particularly malware removal, Brotherhood came to me with the idea of enhancing the White Hat section, we were looking for solutions to share our knowledge related to this field, to bring help, guidance, assistance, and offer some services. For those who knew the MRT (Malware Removal Team) and members related to this group, the idea is to bring back what they used to do here and to go even further.

This thread is part of one of the many initiatives aimed at improving the forum experience, particularly in the white hat section.

There are several ideas behind this thread.

[]Giving concret examples on how a malware analysis is conducted, how to find artifacts, what tools are used, ...
[]Making a place where members could share their knowlege and discuss about malware analysis which is not often addressed
It's also a good opportunity to show the community that the Staff is primarily here to assist and protect the members.

We decided to take this approach further by analyzing the programs, links, and files shared by some members to ensure they do not pose a threat to the community. I believe this adds value to my role as Staff, although I would have done the same if I were not Staff. The advantage is that I have the ability to remove suspicious elements while they are being analyzed.

EDIT : This thread is now a part of the MRT-X after The Brotherhood lead to the creation of a new group, and to bring back the origin essence of the MRT.

FAKE METHODS ❌

G2A🐒
Spoiler (Click to View)

Advance-fee Scam💰
https://hackforums.net/showthread.php?tid=6278385

0-day 0-click for 800$💀
https://hackforums.net/showthread.php?tid=6289947

Hidden Wiki Scam🧅
https://hackforums.net/showthread.php?tid=6296845

MALWARE REMOVAL 🧬

https://hackforums.net/showthread.php?tid=6267544

OTHER 📥

https://hackforums.net/showthread.php?tid=6285798 > How to conduct a PDF File Analysis
https://hackforums.net/showthread.php?tid=6286454 > How to conduct PDF and Word files Analysis
https://hackforums.net/showthread.php?tid=6286517 > Backdoored Stealerium stealer

ONLINE TOOLS 🌐

[]https://www.virustotal.com/gui/home/upload
[]https://www.hybrid-analysis.com/
[]https://tria.ge/
[]https://www.abuseipdb.com/
[]https://any.run
[]https://unpac.me

RE: HF Malware Hunters - Exposing Dangerous Downloads - ttbr0 - Aug 25, 2024

this sounds like a fun idea. id be happy to contribute where i can and provide some mentoring for malware reverse engineering.

RE: HF Malware Hunters - Exposing Dangerous Downloads - Tha Sneak - Aug 25, 2024

As one of the old members of the MRT, I plan on being active assisting with malware removal issues and computer issues. Perhaps, I might even teach as I'm very rusty and a lot has changed since then 12 years ago. I would be willing to help with anything to keep it going.

RE: HF Malware Hunters - Exposing Dangerous Downloads - Bastille - Aug 25, 2024

(Aug 25, 2024 02:46 AM)ttbr0 Wrote: this sounds like a fun idea. id be happy to contribute where i can and provide some mentoring for malware reverse engineering.

That's awesome man ! If you want to create some threads about it feel free, I'll link them here, I'll let you know about the new malware that members are trying to spread here, I could start with a basic analysis, then you could go further with the existing

(Aug 25, 2024 03:23 AM)Tha Sneak Wrote: As one of the old members of the MRT, I plan on being active assisting with malware removal issues and computer issues. Perhaps, I might even teach as I'm very rusty and a lot has changed since then 12 years ago. I would be willing to help with anything to keep it going.

I wish I knew HF before to learn with you guys haha, but I'm glade that you're back it will be valuable for HF for sure, by any chance if you still have materials used during the MRT learning I'm interested

RE: HF Malware Hunters - Exposing Dangerous Downloads - ttbr0 - Aug 25, 2024

(Aug 25, 2024 06:56 AM)Bastille Wrote: That's awesome man ! If you want to create some threads about it feel free, I'll link them here, I'll let you know about the new malware that members are trying to spread here, I could start with a basic analysis, then you could go further with the existing

we can figure something out and collab ✌

RE: HF Malware Hunters - Exposing Dangerous Downloads - Tha Sneak - Aug 25, 2024

(Aug 25, 2024 06:56 AM)Bastille Wrote: I wish I knew HF before to learn with you guys haha, but I'm glade that you're back it will be valuable for HF for sure, by any chance if you still have materials used during the MRT learning I'm interested

As far as I know a majority if not all of it is lost. However, I believe I still have the laptop I used back then buried somewhere so its possible I can dump the hard drive and maybe I get lucky and have some stuff left over. I know I've been searching for my malware removal tool I created like 12 years ago I was going to revisit it as well, but I've already started back over again still the source would save me a ton of time.

I know I had a shit ton of material I've been AWOL on all the forums I used to be affiliated with and am no longer staff so I lost access to the forum side of things. I'm a relic of the past to most as there's been a whole new crew come in it seems. I may go through one of the updated classes in order to re-write/update the material. It's a lot of work for one person though so some help would be grateful if I ever go that route.

I do know the whole malware ecosystem has changed its no where near like it used to be and a lot of people aren't getting infected as frequently due to modern systems.

It seems Android Phones are a target now too and to be honest I don't have a clue how to fix that lol.

RE: HF Malware Hunters - Exposing Dangerous Downloads - Bastille - Aug 31, 2024

ttbr0 Tha Sneak Just added an analysis to the thread : https://hackforums.net/showthread.php?tid=6278798

OP shares a dozen of tools on his website that are backdoored, I can provide you the link if you want

Let me know what you think about the analysis ✌️

RE: HF Malware Hunters - Exposing Dangerous Downloads - ttbr0 - Aug 31, 2024

(Aug 31, 2024 01:25 AM)Bastille Wrote: ttbr0 Tha Sneak Just added an analysis to the thread : https://hackforums.net/showthread.php?tid=6278798

OP shares a dozen of tools on his website that are backdoored, I can provide you the link if you want

Let me know what you think about the analysis ✌️

good job, not much to add on to it. it seems pretty obviously malicious.

RE: HF Malware Hunters - Exposing Dangerous Downloads - Bastille - Sep 2, 2024

(Sep 2, 2024 03:28 PM)Snyke Wrote: https://any.run
https://unpac.me

<3

Didn't know unpac.me, thanks for the share ! I'm adding it to the thread

Hope to see you around, with your new hat ;)

RE: HF Malware Hunters - Exposing Dangerous Downloads - recede - Sep 9, 2024

I just came to this forum and I want to survive here safely. It looks like the owner told some identified malicious links, and some tools to help with testing. Please point out if I've misunderstood anything, I'm still a noob. Also any points that a noob needs to be aware of would be appreciated.

RE: HF Malware Hunters - Exposing Dangerous Downloads - Bastille - Sep 9, 2024

(Sep 9, 2024 01:09 AM)recede Wrote: I just came to this forum and I want to survive here safely. It looks like the owner told some identified malicious links, and some tools to help with testing. Please point out if I've misunderstood anything, I'm still a noob. Also any points that a noob needs to be aware of would be appreciated.

Hello, welcome to HF, few tips :
- stay on HF, don't go out of HF with people proposing you to go on Discord or Telegram, they are likely scammers
- don't download and execute tools before being sure they're safe
- if you have a doubt feel free to report me the content, I'll run an analysis and let you know if it's safe or not
- read the Help Docs, very important

Important too, don't hijack someone's else thread, if you need something open your own thread, this one is dedicated to malicious content, malware analysis, you can ask here to check tools or threads for example.

RE: HF Malware Hunters - Exposing Dangerous Downloads - Regulus - Oct 9, 2024

The savior of HF!
Keep up the amazing job!

RE: HF Malware Hunters - Exposing Dangerous Downloads - Bastille - Oct 11, 2024

(Oct 9, 2024 06:39 AM)Regulus Wrote: The savior of HF!
Keep up the amazing job!

Thanks mate ! Hope this will be useful too for people who want to dive in the malware analysis field as they have practical examples on how to proceed

RE: HF Malware Hunters - Exposing Dangerous Downloads - Bastille - Oct 11, 2024

(Oct 11, 2024 06:28 AM)Sox Wrote: Amazing thread, and I salute you all for your service helping keep others safe from malicious links!

Thank you bro, and thanks for the kind words as well

I hope this can also help those who are getting into malware analysis, providing them some resources and step by step examples

RE: HF Malware Hunters - Exposing Dangerous Downloads - PopeyeToolsUK - Jan 12, 2025

Amazing thread, and I salute you all for your service