Aug 3, 2024 12:32 AM
(This post was last modified: Jun 4, 2025 08:18 AM by Bastille.)
🆕 Latest additions ! 🆕
🧪 Malware Analysis Corner 🧪
After spending a few years helping forum members with security-related issues, particularly malware removal, Brotherhood came to me with the idea of enhancing the White Hat section, we were looking for solutions to share our knowledge related to this field, to bring help, guidance, assistance, and offer some services. For those who knew the MRT (Malware Removal Team) and members related to this group, the idea is to bring back what they used to do here and to go even further.
This thread is part of one of the many initiatives aimed at improving the forum experience, particularly in the white hat section.
There are several ideas behind this thread. -
[]Giving concret examples on how a malware analysis is conducted, how to find artifacts, what tools are used, ...
[]Making a place where members could share their knowlege and discuss about malware analysis which is not often addressed
- It's also a good opportunity to show the community that the Staff is primarily here to assist and protect the members.
We decided to take this approach further by analyzing the programs, links, and files shared by some members to ensure they do not pose a threat to the community. I believe this adds value to my role as Staff, although I would have done the same if I were not Staff. The advantage is that I have the ability to remove suspicious elements while they are being analyzed.
EDIT : This thread is now a part of the MRT-X after The Brotherhood lead to the creation of a new group, and to bring back the origin essence of the MRT.
INFECTED LINKS ☣️
https://hackforums.net/showthread.php?tid=6271578 > Crypto miner 🪙
https://hackforums.net/showthread.php?tid=6269930 > Stealer 🧾
https://hackforums.net/showthread.php?tid=6269932 > Stealer 🧾
https://hackforums.net/showthread.php?tid=6274196 > Stealer 🧾 and Crypto miner 🪙
https://hackforums.net/showthread.php?tid=6274326 > RAT 🐀
https://hackforums.net/showthread.php?tid=6276362 > Stealer 🧾
https://hackforums.net/showthread.php?tid=6278798 > RAT 🐀
https://hackforums.net/showthread.php?tid=6254162 > under review
https://hackforums.net/showthread.php?tid=6238357 > Collection of infected 📁
https://hackforums.net/showthread.php?tid=6268885 > Collection of infected 📁
https://hackforums.net/showthread.php?tid=6281297 > Fake tool, scam 💸
https://hackforums.net/showthread.php?tid=6280678 > BTC Clipper 📎
https://hackforums.net/showthread.php?tid=6281838 > BTC Clipper 📎
https://hackforums.net/showthread.php?ti...id62532703 > BTC Clipper 📎
https://hackforums.net/showthread.php?tid=6282360 > Ransomware 🔒
https://hackforums.net/showthread.php?tid=6283230 > Malicious Chrome extension 🕵️
https://hackforums.net/showthread.php?ti...hlight=txt > Hidden malicious files 😈
https://hackforums.net/showthread.php?tid=6288934 > Stealer 🧾
https://hackforums.net/showthread.php?tid=6293788 > RAT 🐀
https://hackforums.net/showthread.php?tid=6296196 > RAT 🐀
https://hackforums.net/showthread.php?tid=6296631 > Loader 🔃
https://hackforums.net/showthread.php?tid=6298353 > Multiple paylods 🗃️
https://hackforums.net/showthread.php?tid=6298421 Multiple paylods + RAT 🗃️🐀
FAKE METHODS ❌
G2A🐒
There are lot of G2A scams, I'm sharing only few of them :
https://hackforums.net/showthread.php?tid=6277117
https://hackforums.net/showthread.php?tid=6260758
https://hackforums.net/showthread.php?tid=6267642
https://hackforums.net/showthread.php?tid=6269162
Advance-fee Scam💰
https://hackforums.net/showthread.php?tid=6278385
0-day 0-click for 800$💀
https://hackforums.net/showthread.php?tid=6289947
Hidden Wiki Scam🧅
https://hackforums.net/showthread.php?tid=6296845
MALWARE REMOVAL 🧬
https://hackforums.net/showthread.php?tid=6267544
OTHER 📥
https://hackforums.net/showthread.php?tid=6285798 > How to conduct a PDF File Analysis
https://hackforums.net/showthread.php?tid=6286454 > How to conduct PDF and Word files Analysis
https://hackforums.net/showthread.php?tid=6286517 > Backdoored Stealerium stealer
ONLINE TOOLS 🌐
- []https://www.virustotal.com/gui/home/upload
[]https://www.hybrid-analysis.com/
[]https://tria.ge/
[]https://www.abuseipdb.com/
[]https://any.run
[]https://unpac.me
this sounds like a fun idea. id be happy to contribute where i can and provide some mentoring for malware reverse engineering.
As one of the old members of the MRT, I plan on being active assisting with malware removal issues and computer issues. Perhaps, I might even teach as I'm very rusty and a lot has changed since then 12 years ago. I would be willing to help with anything to keep it going.
(Aug 25, 2024 02:46 AM)ttbr0 Wrote: this sounds like a fun idea. id be happy to contribute where i can and provide some mentoring for malware reverse engineering.
That's awesome man ! If you want to create some threads about it feel free, I'll link them here, I'll let you know about the new malware that members are trying to spread here, I could start with a basic analysis, then you could go further with the existing
(Aug 25, 2024 03:23 AM)Tha Sneak Wrote: As one of the old members of the MRT, I plan on being active assisting with malware removal issues and computer issues. Perhaps, I might even teach as I'm very rusty and a lot has changed since then 12 years ago. I would be willing to help with anything to keep it going.
I wish I knew HF before to learn with you guys haha, but I'm glade that you're back it will be valuable for HF for sure, by any chance if you still have materials used during the MRT learning I'm interested
(Aug 25, 2024 06:56 AM)Bastille Wrote: That's awesome man ! If you want to create some threads about it feel free, I'll link them here, I'll let you know about the new malware that members are trying to spread here, I could start with a basic analysis, then you could go further with the existing
we can figure something out and collab ✌
(Aug 25, 2024 06:56 AM)Bastille Wrote: I wish I knew HF before to learn with you guys haha, but I'm glade that you're back it will be valuable for HF for sure, by any chance if you still have materials used during the MRT learning I'm interested
As far as I know a majority if not all of it is lost. However, I believe I still have the laptop I used back then buried somewhere so its possible I can dump the hard drive and maybe I get lucky and have some stuff left over. I know I've been searching for my malware removal tool I created like 12 years ago I was going to revisit it as well, but I've already started back over again still the source would save me a ton of time.
I know I had a shit ton of material I've been AWOL on all the forums I used to be affiliated with and am no longer staff so I lost access to the forum side of things. I'm a relic of the past to most as there's been a whole new crew come in it seems. I may go through one of the updated classes in order to re-write/update the material. It's a lot of work for one person though so some help would be grateful if I ever go that route.
I do know the whole malware ecosystem has changed its no where near like it used to be and a lot of people aren't getting infected as frequently due to modern systems.
It seems Android Phones are a target now too and to be honest I don't have a clue how to fix that lol.
ttbr0 Tha Sneak Just added an analysis to the thread : https://hackforums.net/showthread.php?tid=6278798
OP shares a dozen of tools on his website that are backdoored, I can provide you the link if you want
Let me know what you think about the analysis ✌️
(Aug 31, 2024 01:25 AM)Bastille Wrote: ttbr0 Tha Sneak Just added an analysis to the thread : https://hackforums.net/showthread.php?tid=6278798
OP shares a dozen of tools on his website that are backdoored, I can provide you the link if you want
Let me know what you think about the analysis ✌️
good job, not much to add on to it. it seems pretty obviously malicious.
(Sep 2, 2024 03:28 PM)Snyke Wrote: https://any.run
https://unpac.me
<3
Didn't know unpac.me, thanks for the share ! I'm adding it to the thread
Hope to see you around, with your new hat ;)
I just came to this forum and I want to survive here safely. It looks like the owner told some identified malicious links, and some tools to help with testing. Please point out if I've misunderstood anything, I'm still a noob. Also any points that a noob needs to be aware of would be appreciated.
(Sep 9, 2024 01:09 AM)recede Wrote: I just came to this forum and I want to survive here safely. It looks like the owner told some identified malicious links, and some tools to help with testing. Please point out if I've misunderstood anything, I'm still a noob. Also any points that a noob needs to be aware of would be appreciated.
Hello, welcome to HF, few tips :
- stay on HF, don't go out of HF with people proposing you to go on Discord or Telegram, they are likely scammers
- don't download and execute tools before being sure they're safe
- if you have a doubt feel free to report me the content, I'll run an analysis and let you know if it's safe or not
- read the Help Docs, very important
Important too, don't hijack someone's else thread, if you need something open your own thread, this one is dedicated to malicious content, malware analysis, you can ask here to check tools or threads for example.
The savior of HF!
Keep up the amazing job!
(Oct 9, 2024 06:39 AM)Regulus Wrote: The savior of HF!
Keep up the amazing job!
Thanks mate ! Hope this will be useful too for people who want to dive in the malware analysis field as they have practical examples on how to proceed
Oct 11, 2024 06:41 AM
(This post was last modified: Oct 11, 2024 06:41 AM by Bastille.)
(Oct 11, 2024 06:28 AM)Sox Wrote: Amazing thread, and I salute you all for your service helping keep others safe from malicious links!
Thank you bro, and thanks for the kind words as well
I hope this can also help those who are getting into malware analysis, providing them some resources and step by step examples
Amazing thread, and I salute you all for your service
|