May 20, 2015 03:08 AM
(This post was last modified: May 20, 2015 12:40 PM by Dafuq.)
As soon as I downloaded it, and ran it, i saw a error, had my AV disabled.
Within few mins my cursor started moving, and pages started refreshing. Definitely hacked. 100% sure!!
Would like to submit the file for testing in case somebody is interested.
I tried posting this on his Thread, but it wont let me post. Had to make a new thread!!
download link for both s/w i was using.
http://ge.tt/6wLWnlG2
Okay, so now i get a link via PM claiming this is the original njRAT - http://up.dev-point.com/downloadf-844b1a...1-rar.html
check the md5, size and whatever u people want.
You should 100% post in here Malware, Rat, and Virus Removal
Ask for a system check-up.
Couldn't it have been something you had recently downloaded before? Since Vuln's thread has 77 pages and I think you're the first to experience problems
May 20, 2015 03:15 AM
(This post was last modified: May 20, 2015 03:15 AM by Dafuq.)
(May 20, 2015 03:11 AM)Koekert Wrote: Couldn't it have been something you had recently downloaded before? Since Vuln's thread has 77 pages and I think you're the first to experience problems
I just downloaded 2 things
1. VPN client
2. njRat
VPN client is obviously appearing to be clean, but I would get it checked as well, in case its the one.
but Somehow I'm unable to post on xVulnerables thread, thats why i find it fishy!!
(May 20, 2015 03:10 AM)Dickleson Wrote: You should 100% post in here Malware, Rat, and Virus Removal
Ask for a system check-up.
Made a thread there, thank u!
DO NOT DEAL WITH THIS MEMBER
![[Image: 6f09e2cd3e.png]](https://puu.sh/hU0De/6f09e2cd3e.png)
lol wtf
(May 20, 2015 03:17 AM)Meow Wrote:
lol wtf
That's not indicating that it is dangerous to the downloader though.
That's simply because the file is a RAT. Even the UI and stuff gets classed as malware because of the coding behind it all.
May 20, 2015 03:19 AM
(This post was last modified: May 20, 2015 03:19 AM by Lovesosa.)
(May 20, 2015 03:17 AM)Meow Wrote:
lol wtf
thaths normal ofc the program is an rat, so it will be decected as an malware.
DO NOT DEAL WITH THIS MEMBER
(May 20, 2015 03:19 AM)Lovesosa Wrote: thaths normal ofc the program is an rat, so it will be decected as an malware.
"I want to download malware" 🤣🤣
(May 20, 2015 03:15 AM)Dafuq Wrote: I just downloaded 2 things
1. VPN client
2. njRat
VPN client is obviously appearing to be clean, but I would get it checked as well, in case its the one.
but Somehow I'm unable to post on xVulnerables thread, thats why i find it fishy!!
Made a thread there, thank u! You mean you can't post on your pc? Because your post did show up, which I guess you posted via your phone.
somebody test this shit with an vm , i dont have an vm otherwhise i wud.
(May 20, 2015 03:24 AM)Lovesosa Wrote: somebody test this shit with an vm , i dont have an vm otherwhise i wud.
I would appreciate if someone can test it, coz then we will be sure.
if the file is crypted it could not work on a vm.
I ran it sandboxie and nothing abnormal.
There is a possibility that it wont execute the trojan (if it is infected) if it detects a vm/sandboxie.
Lotta blood to let, peace to make, give a fuk about a check
(May 20, 2015 03:31 AM)BahNahNah Wrote: I ran it sandboxie and nothing abnormal.
There is a possibility that it wont execute the trojan (if it is infected) if it detects a vm/sandboxie.
I ran it on my System, coz xVulnerables was supposedly "HQ" and "Trusted"
I am indeed shocked.
(May 20, 2015 03:32 AM)Dafuq Wrote: I ran it on my System, coz xVulnerables was supposedly "HQ" and "Trusted"
I am indeed shocked.
Download autoruns and see if there is anything abnormal in your startup (check for things in Appdata/temp)
https://technet.microsoft.com/en-us/sysi...63902.aspx
Lotta blood to let, peace to make, give a fuk about a check
|
