+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Antivirus & Protection (https://sinister.ly/Forum-Antivirus-Protection)
+--- Thread: [Virus] Hacxx Fake Virus Dropper - Free Download (/Thread-Virus-Hacxx-Fake-Virus-Dropper-Free-Download)
[Virus] Hacxx Fake Virus Dropper - Free Download - hacxx - 04-22-2020
This program will download a fake virus and save to disk trigging any antivirus alert message.
Reference:
https://www.rack911labs.com/research/exploiting-almost-every-antivirus-software/
Note:
The reference is much more complicated than this dropper. Basically the dropper will request a file and it will download the eicar virus test and save in that file forcing the antivirus to quarantine that file. The reference talks about using the same dropper method to download eicar virus test to a folder and when the antivirus trigger the quarantine it will symlink the antivirus folder with the eicar virus test folder. Since antivirus has full access to the system this folder will have full access too. From there is possible to launch any app bypassing UAC or any other protection.
Download 1:
https://adearn.net/NXA
https://shon.xyz/Yesq5
Download 2:
https://www.uploadship.com/5b64d0c8c2dcffbb
https://uploadrar.com/ytrb9q958ozp
RE: [Virus] Hacxx Fake Virus Dropper - Free Download - mothered - 04-23-2020
I've just read the full article, and It's very Impressive Indeed.
Quite clever to take advantage of AVs that obviously run with elevated privileges, thus has the capacity to perform an array of unrestricted (malicious) tasks.