locknlol Posted February 22, 2014 Share Posted February 22, 2014 Hey there everyone! New to the community, but not AutoIt. Just recently someone tried to social engineer me into running an AutoIt exe file. I had my suspicions immediately so I decided to throw it onto a few malware VM machines to figure out what it does. After checking it out a bit, I figured out that it was in fact an AutoIt 3.3.8.1 exe and I used Exe2Aut to decompile it as best as I could. How ever, either, it did not decompile correctly, or it's been obfuscated. This is the first time dealing with an AutoIt.exe so I was wondering if I could get some help. I'm not going to post the source code or any links to the actual exe publically. You may how ever private message me for either, and I will send them that way. -- AGAIN: These are confirmed to be some type of RAT. There is some kind of C&C used to launch commands, and I'd like to figure out exactly what it is. To the mods: If this is a violation of the rules, or there is a better, or more security based area I can post this in, please send me in that direction. Thanks! Link to comment Share on other sites More sharing options...
Moderators Melba23 Posted February 22, 2014 Moderators Share Posted February 22, 2014 locknlol,Admitting to using a decompiler is a capital offence here. Consider yourself lucky that it is your first post - other wise you would be permanently banned. As it is this thread will now be locked and I suggest you read the Forum rules (there is also a link at bottom right of each page) before you post again. M23 Sarah_Hacker 1 Any of my own code posted anywhere on the forum is available for use by others without any restriction of any kind Open spoiler to see my UDFs: Spoiler ArrayMultiColSort ---- Sort arrays on multiple columnsChooseFileFolder ---- Single and multiple selections from specified path treeview listingDate_Time_Convert -- Easily convert date/time formats, including the language usedExtMsgBox --------- A highly customisable replacement for MsgBoxGUIExtender -------- Extend and retract multiple sections within a GUIGUIFrame ---------- Subdivide GUIs into many adjustable framesGUIListViewEx ------- Insert, delete, move, drag, sort, edit and colour ListView itemsGUITreeViewEx ------ Check/clear parent and child checkboxes in a TreeViewMarquee ----------- Scrolling tickertape GUIsNoFocusLines ------- Remove the dotted focus lines from buttons, sliders, radios and checkboxesNotify ------------- Small notifications on the edge of the displayScrollbars ----------Automatically sized scrollbars with a single commandStringSize ---------- Automatically size controls to fit textToast -------------- Small GUIs which pop out of the notification area Link to comment Share on other sites More sharing options...
Recommended Posts