FAKE Antivirus? Malware Analysis of Decoy 'kaspersky.exe'

Рет қаралды 271,114

3 жыл бұрын

If you would like to support the channel and I, check out Kite! Kite is a coding assistant that helps you code faster, on any IDE offer smart completions and documentation. www.kite.com/get-kite/?... (disclaimer, affiliate link)
For more content, subscribe on Twitch! / johnhammond010
If you would like to support me, please like, comment & subscribe, and check me out on Patreon: / johnhammond010
PayPal: paypal.me/johnhammond010
E-mail: johnhammond010@gmail.com
Discord: johnhammond.org/discord
Twitter: / _johnhammond
GitHub: github.com/JohnHammond

Пікірлер: 500

@benvoisey3942 3 жыл бұрын

I cried when he downloaded update.exe as kaspersky.exe

@mattplaygamez 3 жыл бұрын

Do you play Among us John

@blade1551431 3 жыл бұрын

I like that the videos are not scripted please make more of a Malware Analysis

@Lexxrt 3 жыл бұрын

File Description: b

@michaelwerkov3438 2 жыл бұрын

if seth Rogan was a hacker instead of a stoner

@AlexCouch65 3 жыл бұрын

Lmao update.exe didn't work cause you named the folder kasperky not kaspersky

@108kitsune 3 жыл бұрын

Guys, don't worry; its just Nintendo using your PC to mine for bitcoin .

@atluxity Жыл бұрын

Protip, the kansas pin on the map is just the center of the US and default when not knowing any better. There is a farm there and the local sheriff will yell at you if you try to say they are cyber criminals.... again :D

@sebastianstieber9457 3 жыл бұрын

I got hacked and I really cant get enough of this content, it's just so interesting. As far as I know your the only one making videos about this stuff that are really fun and enjoyable. Thanks dude

@aelliixx 3 жыл бұрын

Where do you find these files? I'd like to delve into this myself.

@erich8948 3 жыл бұрын

"Skip ahead if you don't want to watch me suffer"... you have CLEARLY misunderstood why I'm here ;)

@whatnowsami9225 3 жыл бұрын

Yaaaassssss,

@user-rg1jp2us4o 3 жыл бұрын

I love how John can easily edit the parts he messes up out but he still doesn't and leaves it in. I love seeing your internal thought process when it comes to solving problems.

@floatingblaze8405 3 жыл бұрын

John:

@yotshmep1224 2 жыл бұрын

I am a beginner Python programmer and I like to watch you videos because they make me feel like I understand the things that are happening, but I am just absolutely clueless as to what's happening. Love it

@thislooksfun1 3 жыл бұрын

I can see two reasons why running update.exe at ~

@thomasandreatta6073 3 жыл бұрын

John: download two time kaspersky.exe instead of upload.exe

@Konym 3 жыл бұрын

You are quickly becoming my new favorite person to watch when I get home from work. Great stuff!

@dstensnes 3 жыл бұрын

John: Here is what I think you should try with this: Determine what the config url turns out to be, then see if you can slap your own command and control server together, to send you an email. That would be cool. Like, tame the malware and do your bidding. Another approach would be to fake an update server, and see if your can push other code to your VM that way. It would give viewers a nice insight into how the remote (usually hidden) aspect could work in theory. That would also make for a great hackthebox style box as well!