[jakov]

I remember seeing here once a python/perl script that would do it.
Thanks.

[Xylitol]

just

Code: Select all

%B4111111111111111^KERNEL/MODE.INFO^130710100000000000000000000666000000?
;4111111111111111=13071010000000000666?

in notepad is enought

[jakov]

Thanks,
I'm trying to analysis the behavior of Alina, and for now I don't see any HTTP requests to the C&C.
Help?

[Xylitol]

Because C&C are deads.
try this one: http://www.kernelmode.info/forum/viewto ... 516#p21516
Still alive.

[jakov]

Thanks,
I setup a wireshark capure session and waited for some HTTP activity- and nothing.

[jakov]

ok, now everything is working

btw- how you manage to hack almost any c&c web panel?

[Xylitol]

a magician never reveals his secrets :)