Excerpt
Content
December 12, 2016
Last time we looked at the overview of the latest release – Crystal Version – and we got a good look at what the bot is supposed to be doing. We also got a top-level look at the architecture. Then, as promised, I turned it over to our reversing guru, Hasherezade for a closer look at DF's internals. After digging a bit through the code – which was very easy to reverse as you will see – her conclusion is that the code leaves something to be desired. It is written in Visual Basic. It de-compiled using VB Decompiler (https://www.vb-decompiler.org).
We had two samples – one with anti-reversing turned on and one…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by scmagazine.com on scmagazine.com.
More from scmagazine.com1
- Significant ransom payment by major Iranian IT firm underwayscmagazine.com · Published 9 Sep 2024
