no way in really proving its a rat until your info gets stolen, until then its a free packed with vmp, also he didn't answer as to why the free was hooking audio services.
you can reverse it despite it being packed, you can analyze it dynamically, you can capture outgoing networking from the client. There are multiple ways of proving it, suspicion is justified, false claims without any evidence are not.
also hooking audio services might seem suspicious BUT the loader was literally playing music, it is a extremly unconventional way to do this since there are many libraries that can do this for you rather than hooking WASAPI or whatever he was doing. While being unconventional this alone does not proof anything.
also hooking audio services might seem suspicious BUT the loader was literally playing music, it is a extremly unconventional way to do this since there are many libraries that can do this for you rather than hooking WASAPI or whatever he was doing. While being unconventional this alone does not proof anything.
you can reverse it despite it being packed, you can analyze it dynamically, you can capture outgoing networking from the client. There are multiple ways of proving it, suspicion is justified, false claims without any evidence are not.
I never said it was for sure ratted lol I said it was most likely ratted because this just looks like skeets img gui over pasted garbage. If you want to prove me wrong analyze it yourself and show outgoing traffic is clean.
also posting the audio playback code doesnt prove anything in regaurds to the rat comment a rat can most definetly play music while doing its job. you've shown me one function and while you've awnsered why you hook onto audio that doesnt dismiss the presence of malicious ones. Like I said if you want to completely disprove me and shut me up show the network traffic during execution.
I never said it was for sure ratted lol I said it was most likely ratted because this just looks like skeets img gui over pasted garbage. If you want to prove me wrong analyze it yourself and show outgoing traffic is clean.
also posting the audio playback code doesnt prove anything in regaurds to the rat comment a rat can most definetly play music while doing its job. you've shown me one function and while you've awnsered why you hook onto audio that doesnt dismiss the presence of malicious ones. Like I said if you want to completely disprove me and shut me up show the network traffic during execution.
I never said it was for sure ratted lol I said it was most likely ratted because this just looks like skeets img gui over pasted garbage. If you want to prove me wrong analyze it yourself and show outgoing traffic is clean.
also posting the audio playback code doesnt prove anything in regaurds to the rat comment a rat can most definetly play music while doing its job. you've shown me one function and while you've awnsered why you hook onto audio that doesnt dismiss the presence of malicious ones. Like I said if you want to completely disprove me and shut me up show the network traffic during execution.
"this just looks like skeets img gui" ? why would you go through the trouble of making the skeet UI, wire up a paste under it when you could just recompile the .bin as a dll and add the rat in there? And sure posting the relevant code section doesnt disprove anything but yet again your claims are baseless? Also this specific binary is not packed, yet i have to agree that it does have networking potential. If you are talking about Azura NL thats a different story but I have no idea what you are talking about regarding this binary.
Sure that may be true but im also not here to defend either site not discredit anyone, its just that baseless claims without any proof behind them suck
Sure that may be true but im also not here to defend either site not discredit anyone, its just that baseless claims without any proof behind them suck
Sure that may be true but im also not here to defend either site not discredit anyone, its just that baseless claims without any proof behind them suck
Sure that may be true but im also not here to defend either site not discredit anyone, its just that baseless claims without any proof behind them suck
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.