4 ms·
A lot of cryptostealer malware is bespoke and won't get caught by scanners, but you could start by dropping it into virustotal. Particularly anything that look
by nullc 3y ago
A lot of cryptostealer malware is bespoke and won't get caught by scanners, but you could start by dropping it into virustotal.
Particularly anything that looks like wallet crackers is frequently full of malware-- as I assume people feel less worry of arrest and less moral concern with robbing other (wanna-be) thieves.
From my experience on bitcointalk ... It's often hard to prove it's malware, as a popular technique is to make the software phone home for some quasi legitimate looking purpose and then have an RCE vulnerability in the phone home interface.
It may even be the same guy that keeps making new trojans that work this way over and over again.
- wslh 3y agoVirustotal doesn't give any alert [1]. Good opportunity to analyze it by myself. Wait! It is not clear that Virustotal analyzes ZIPs [2]. When I upload the EXE within, it gives different results but no virus alert [3]. The weird thing is that [1] result in "clean" status over the antiviruses tested while [3] results on "Undetected". [1] https://www.virustotal.com/gui/url/3815d095d5031535475478b04bf102a41580cbf91825e77c67cab1f9f0990a41 https://www.virustotal.com/gui/url/3815d095d5031535475478b04... [2] https://superuser.com/questions/1651122/why-isnt-virustotal-detecting-a-zip-file-that-contains-malware https://superuser.com/questions/1651122/why-isnt-virustotal-... [3] https://www.virustotal.com/gui/file/93fe6b75fada79b5fa6d0affa0eb7d9a873bcec691b6236c948533097903e63d https://www.virustotal.com/gui/file/93fe6b75fada79b5fa6d0aff...