10 Nov
2015
10 Nov
'15
11:04
On 2015-11-10 08:40, Per Jessen wrote:
I guess you didn't post all of the code?
No, certainly. I did not want to trigger filters. ;-)
Most of those functions aren't defined above. It looks similar to this:
https://www.hybrid-analysis.com/sample/3af098f396af3e6f5d56107ba443546cddda2...
Yes, exactly.
My guess is that it'll take you to a website for downloading a trojan.
My, what a complicated way... Would that work in Linux, or the target is Windows only? I saw a string mentioning ".exe". -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)