Reply to thread

Message

<blockquote data-quote="lockeddown" data-source="post: 1114608" data-attributes="member: 119339">[USER=32260]@Andy Ful[/USER]it download nothing it is a straight up connection to the RAT on the windows 7 VM machine .You can after that download the execute other things .The specific file is not persistent Example - Injection , startup , side load on every startup like dropping another file that will execute it .But i can add that ..You can use Buster Sandbox analyzer for offline use .And you can setup a specific honypot forgot the name of the site that supply it with the tools .on that specific use case there is no need in vpn its locally like 192.168.1.1I know all of those things <img class="smilie smilie--emoji" loading="lazy" alt="😊" title="Smiling face with smiling eyes&nbsp; &nbsp; :blush:" src="https://cdn.jsdelivr.net/joypixels/assets/6.6/png/unicode/64/1f60a.png" data-shortname=":blush:" />&nbsp; , but still a good reminder for starters&nbsp; .<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite138" alt=":geek:" title="Geek&nbsp; &nbsp; :geek:" loading="lazy" data-shortname=":geek:" /></blockquote>

[QUOTE="lockeddown, post: 1114608, member: 119339"] [USER=32260]@Andy Ful[/USER] it download nothing it is a straight up connection to the RAT on the windows 7 VM machine . You can after that download the execute other things . The specific file is not persistent Example - Injection , startup , side load on every startup like dropping another file that will execute it . But i can add that .. You can use Buster Sandbox analyzer for offline use . And you can setup a specific honypot forgot the name of the site that supply it with the tools . on that specific use case there is no need in vpn its locally like 192.168.1.1 I know all of those things 😊 , but still a good reminder for starters .:geek: [/QUOTE]

Verification