RE: BoosTHTTPv3.0 Mega PowerFul FasT Pr0xy | SockeT 11-23-2015, 04:31 PM
#14
(11-23-2015, 03:50 PM)The Real Slim Shady Wrote: https://www.virustotal.com/en/file/777ef...448289292/
1. Detection rate 46/54
2. Behavioural Information reports http requests that are highly suspicious for what is supposed to be an http flooder. The site is now offline so its hard to tell exactly what it was doing, but based on the file names being remotely accessed, it's clearly not just an http flooder
3. His Youtube demo used a Python script, where as the file he provided was a .NET application. If this was a py2exe application (which is a plausible reason it's an exe instead of .py) then VT would have shown some file creation activity under Behavioural Information, which it does not. (it would create DLL's and what not to run the the script). So major discrepancy between the video and the application.
Well that's convincing information.
Thanks for the writeup @The Real Slim Shady