Backdoor ABot

#8438 by markusg
Tue Sep 06, 2011 5:31 pm

MincraftPatcher5.2.exe
MD5 : bd52ae1f5d22f14b3c4b71c58ba3b6fc
http://www.virustotal.com/file-scan/rep ... 1315329227

Attachments

MincraftPatcher5.2.rar

(95.09 KiB) Downloaded 52 times

Username

markusg

Posts

737

Joined

Mon Mar 15, 2010 2:53 pm

Re: Malware/Not classified

#8441 by nullptr
Wed Sep 07, 2011 4:22 am

markusg wrote:MincraftPatcher5.2.exe
MD5 : bd52ae1f5d22f14b3c4b71c58ba3b6fc
http://www.virustotal.com/file-scan/rep ... 1315329227

Internal name Aldi Bot

[Aldi Bot coded by till7 | I'm too l33t for the f***ing AV's!]

StartHTTP
StartTCP
StopHTTPDDoS
StopTCPDDoS
StopDDoS
DownloadEx
CreateSocks
StealData
Update

Starts through HKCU...Run key.
downloads Server.exe - http://www.virustotal.com/file-scan/rep ... 1315336982
Payload exe is decrypted overlay - see attachment.

Attachments

aldi_pwm.zip

pwd: malware
(57.58 KiB) Downloaded 51 times

Username

nullptr

Posts

209

Joined

Sun Mar 14, 2010 6:35 am

Re: Backdoor ABot

#9016 by Xylitol
Fri Oct 07, 2011 12:25 pm

Hi guys, this Aldibot got leaked.
G Data guys says it's based on the ZeuS source code.

Source code of aldi bot and php panel in attach.

Attachments

ABot.zip

pwd: xylibox
(828.18 KiB) Downloaded 66 times

Registration Problems and FAQ - Rules For Malware Requests

Username

Xylitol

Rank

Global Moderator

Posts

1706

Joined

Sat Apr 10, 2010 5:54 pm

Location

Seireitei, Soul Society

Contact

Aldi bot v2 (Scar)

#9174 by wayzoken
Sat Oct 15, 2011 6:47 pm

The main functions of "Aldi Bot" v1.0 are:
• Ability to perform DDoS attacks
• SOCKS: the bot owner can use the PC of the victim as a proxy
• Firefox password stealer: theft of passwords stored in the database Firefox
• Remote execution of any file

An update v2.0 adds the following functions to those already available:
• Pidgin password stealer: theft of passwords of instant messaging Pidgin
• jDownloader password stealer: theft of passwords from the host downloader
http://www.virustotal.com/file-scan/rep ... 1318703150

Attachments

66464929233.rar

pw: malware
(54.96 KiB) Downloaded 43 times

Username

wayzoken

Posts

7

Joined

Thu Oct 06, 2011 4:35 pm

Re: Aldi bot v2 (Scar)

#9179 by Striker
Sun Oct 16, 2011 1:58 am

The author prides himself with a video, hosted on Youtube, which apparently shows an “Aldi Bot” DDoS attack against the website of the German Federal Police (http://www.bka.de). The creator of that shit sold he's builder for 10€. 1 x Builder + stub + updates + installation assistance = €10

You can buy that builder via Paysafecard.