Malware Tricks to Avoid Detection by using Big Junk Data and Activates a Backdoor

2

[jpshare]A New technique used by Malware authors by Creating More unwanted junk file embedded with Malicious payload which leads to Avoid Detection by AV. Those unwanted Garbage files contains more than 100 MB junk files.

According to the Researchers from Kaspersky ,attacker has been using the XXMM malware toolkit and this sample has a very big overlay of junk data and 20 other similar samples are collected by YARA Rules.

This Malware identified as a Trojan loader which leads to Open a Backdoor in Victim Machine and the Backdoor name is Discovered as a “wali”

config strings with “[wali]” [souce :Kaspersky]

According to Kaspersky The size of one wali loader (MD5:d1e24c3cc0322b22988a1ce366d702e5) was initially 1,124,3,52 bytes. The function that appends garbage produced a new malware file in a real attack (MD5: 8bd0ddeb11518f3eaaddc6fd82627f33) and the file size was increased to 105,982,049 bytes.

What is inside the wali loader:

its contains more then 100 MB of non related junk files  is the Reason Behind of the Wali loader’s big Size Backdoor .

According to Researchers ShadowWali was an earlier version of Wali. The fact that ShadowWali only supported 32-bit architectures, while Wali runs on both 32-bit and 64-bit systems.

The wali loader is installed onto the victim’s machine when the overlay data is generated by the wali dropper.

Structure of wali modules [Source:Kaspersky]

“Wali dropper1 checks the CPU architecture. If the CPU is 64-bit, this malware decrypts the 64-bit version of the wali loader from resource id 101. Otherwise, it decrypts the 32-bit version of the wali loader from resource id 102″

Based Upon the Random Values Malware junk size may Differ betweek 50 MB to 200 MB.

Some of sample Malware Detected by Kaspersky,

  • Trojan.Win32.Xxmm
  • Trojan.Win64.Xxmm
  • Trojan-Downloader.Win32.Xxmm
  • Trojan-Downloader.Win64.Xxmm
  • Trojan-Dropper.Win32.Xxmm
  • Trojan-Dropper.Win64.Xxmm

 Once ShadowWali or Wali are installed, the malware injects itself into other processes.

In most infections, the process of choice has been Internet Explorer (iexplorer.exe), but there have been cases where the malware was injected into Windows Explorer (explorer.exe) and the Local Security Authority Subsystem Service (lsass.exe).

Also Researchers said, executable malwares disguised as movie files and ISO files spread over torrents, which in these cases, the malware size is inflated to a few gigabytes in order to mimic true content .

Also Read:

Millions of Smartphones are Vulnerable to inject Backdoor via open Ports

A new IoT Botnet is Spreading over HTTP Port 81 and Exploit the Vulnerability in Security Cameras

Mass Scan Revealed More Than 30000 Windows Computers Infected by NSA backdoor DoublePulsar

2 COMMENTS

Leave a Reply

Situs Togel 4D Bo Togel Bandar Togel Deposit Pulsa Agen Togel Deposit Ovo Togel Bet 100 Perak Bandar Togel Terbesar Toto Togel Bandar Togel Daftar Bandar Togel Terbesar agen togel deposit ovo situs togel 4d Slot Bonus 100 Situs Judi Slot Terbaik Slot Gacor Slot Pragmatic Link Slot Gacor Dingdong Togel Slot Deposit Pulsa Situs Slot Judi Online Agen Slot Online BO Togel 5 Bandar Togel Terpercaya Agen Togel Bet 100 Perak Toto Togel Agen Togel Resmi Bandar Togel Deposit Pulsa Dingdong Togel Situs Togel Terbesar Bandar Darat Togel Togel Toto Online Togel Singapore BO Togel Bet 100 Perak Agen Togel Deposit Pulsa Situs Bandar Togel Hadiah 4D 10 Juta 10 Situs Togel Terpercaya 5 Bandar Togel Terpercaya Situs Slot Deposit Pulsa Agen Slot Online Togel Hari Akun Slot Bet Game Situs Judi Slot Situs Judi Slot Resmi Game Slot Slot Game Bonus New Member 100 Agen Togel terpercaya 10 Situs Togel Terpercaya Agen Togel Online Agen Togel Singapore Togel Toto Macau Situs Togel Terpercaya 10 Situs Togel Terpercaya Situs Bandar Judi Togel Situs Togel BRI Online 24 Jam situs togel dan slot SITUS TOGEL DEPOSIT VIA DANA situs togel terbaik 5 bandar togel terpercaya bandar togel hadiah 4d 10 juta terpercaya BANDAR TOGEL HADIAH 4D 10 JUTA Situs Slot Bet 100 Perak situs bandar togel terpercaya Bandar Togel Deposit Pulsa Situs Slot Situs Slot deposit Pulsa Agen Slot Dan Togel Toto Slot Bandar Togel Hadiah 4D 10 Juta Situs Togel Online Situs Slot Togel Terlengkap Agen Slot BO Togel Agen Togel Online Situs Bandar Togel Dan Slot Situs Togel Togel Deposit Pulsa Slot Gacor Bandar Togel Lengkap Situs Slot 5 Bandar Togel Terpercaya Bo Togel dan Slot Toto Togel Judi togel Togel Hadiah 2D 100rb Bandar Togel Dan Slot Togel Bet 100 Lotre Togel bandar darat togel 5 bandar togel terpercaya Situs Togel Terpercaya bandar judi terpercaya Bandar Togel Terbesar Bandar Togel Online bandar togel bandar togel terpercaya hadiah terbesar judi togel bandar togel terbesar situs judi online bandar togel terbesar Togel Online Bandar Togel Bolak Balik Dibayar Bandar Togel Lengkap situs togel Bandar Togel Togel Hadiah 4d Terbesar bandar togel hadiah terbesar Bandar Togel Hadiah 4d Terbesar judi togel Togel Online Terbaik Situs Togel Terbesar Bandar Lotre Togel Togel Kamboja Dingdong Togel Bandar Togel Terbesar dan Terpercaya Bandar Togel Terpercaya Daftar Bandar Togel Togel Deposit Via Dana 5 Bandar togel terpercaya agen togel terpercaya slot online Situs Bonus New Member Slot Gacor 10 Situs Bandar Togel Slot Online Agen Slot Online Slot Pragmatic Slot Pragmatic Agen Togel Lengkap Bandar Togel Hadiah 4d 10 Juta Slot Resmi Bo Togel Situs Togel Terpercaya 5 Bandar Togel Terpercaya Agen Bo Togel Bandar Togel Slot Pragmatic Judi Slot Pragmatic agen togel online Agen Togel Terpercaya toto togel 5 Bandar Togel Terpercaya Bandar Togel Terpercaya Bandar Togel Online Situs Togel Resmi Agen Slot Judi Slot Online 10 Situs Togel Terpercaya Slot Pulsa Tanpa Potongan Situs Slot Gacor Bo Togel Togel deposit pulsa Agen Judi Slot Online Terpercaya Situs Slot Gacor Mesin Slot Bandar Togel dan Slot Agen Judi Slot Pragmatic Slot Online Via Dana Link Slot Gacor Situs Game Slot Online SITUS SLOT ONLINE GAME SLOT Agen Togel Terpercaya Bandar Togel Slot Bandar Togel dan Slot Bandar Togel Terpercaya Hadiah 4d 10 Juta Bo Togel Bandar Togel Deposit Pulsa Bandar Togel Terpercaya Bandar Togel Hadiah 2d 100rb Slot Pragmatic 5 Bandar Togel Terpercaya Bandar Darat Togel Bandar Togel Dan Slot Bandar Togel Hadiah 2d 100rb Bandar Togel Hadiah Terbesar Bandar Togel Lengkap Bandar Togel Online Bandar Togel Terbesar Daftar Bandar Togel Tertua Agen Slot Bonus 100 Agen Togel Mesin Slot BANDAR TOGEL HADIAH 2D 100RB Bandar Togel 77 TOTO SLOT 5 Bandar Togel Terpercaya 5 Bandar Togel Terpercaya 2022 Situs Judi Slot Terbaik Bandar Darat Togel Bandar Lotre Togel Bandar Togel Bet 100 Rupiah Bandar Togel Bet 100 Bandar Togel Hadiah 4d 10 Juta Terpercaya BANDAR TOGEL HADIAH 4D 10 JUTA Bandar Togel Terpercaya BANDAR TOGEL TERPERCAYA HADIAH TERBESAR Bandar Togel Terbesar BANDAR TOGEL LENGKAP Bandar Togel Hadiah Full Togel Online Bandar Togel Resmi Bandar Togel Terbaik Bandar Togel Terbesar Situs Slot Online Bandar Judi Slot Online BANDAR JUDI SLOT ONLINE BANDAR TOGEL TERPERCAYA KUMPULAN SITUS JUDI SLOT 4D Situs Bandar Togel Hadiah 4d 10 Juta LINK BANDAR SLOT TERPERCAYA Daftar Bandar Togel Terbesar Dan Terpercaya Daftar Bandar Togel Tertua Dingdong Togel Daftar Situs Judi Slot Online BANDAR TOGEL TERPERCAYA AGEN JUDI SLOT ONLINE TERPERCAYA DAFTAR JUDI SLOT ONLINE Slot Pragmatic BO JUDI SLOT ONLINE DAFTAR SITUS SLOT GACOR Nama Nama Situs Judi Slot Online Terpercaya Togel China Bandar Judi Slot Online SITUS JUDI SLOT DEPOSIT PULSA Situs Slot Deposit Pulsa Togel Kamboja Agen Togel Resmi AGEN SLOT ONLINE Slot Bonus New Member 100 LINK BO TERPERCAYA SITUS SLOT GACOR Slot Gacor Agen Judi Slot Online Resmi DAFTAR NAMA NAMA SITUS JUDI SLOT ONLINE DAFTAR SITUS JUDI SLOT ONLINE AGEN TOGEL RESMI DEPOSIT PULSA Toto Slot Agen Judi Slot Gacor SLOT ONLINE KUMPULAN NAMA SITUS SLOT ONLINE TERPERCAYA Bandar Togel dan Slot GAME SLOT ONLINE Togel Bandar Darat BANDAR TOGEL TERBESAR TOGEL HADIAH PRIZE 123 BANDAR TOGEL TERPERCAYA Agen Slot Online Situs Slot Deposit Pulsa Situs Judi Online Situs Slot Online Situs Judi Togel Situs Judi Slot Online Terpercaya 5 Bandar Togel Terpercaya Toto Slot Agen Judi Slot Online Situs Slot Terbaru Togel Deposit Pulsa Slot Online Situs Judi Slot Online Terpercaya Slot Pragmatic Bandar Togel Bet 100 Perak Situs Slot Slot Deposit Pulsa Slot Mpo Situs Judi Slot Online Slot Online Terbaik dan Terpercaya Game Slot Agen Slot Pulsa Slot Gacor Agen slot dan Togel Agen Judi Slot Online Terpercaya Togel dan Slot Agen Togel Slot Gacor Slot Gacor Agen Judi Slot Online24Jam Slot Gacor Judi Online Judi Slot Online Bo Togel Slot Online Sultanplay Situs Judi Slot Online Situs Mpo Slot Gacor Slot PG Soft Slot Online Sultanplay Situs Togel Online Agen Judi Slot Online Situs Togel dan Slot Online 10 Situs Togel Terpercaya 10 SITUS TOGEL TERPERCAYA Slot Online Terpercaya Joker Slot Bandar Togel Dan Slot Bandar Togel Hadiah Full Bandar Togel Hadiah Terbesar Bandar Togel BANDAR TOGEL TERPERCAYA Akun Togel Resmi Togel Macau Togel Kamboja Slot Deposit 5000 Slot Terpercaya Togel Singapura Toto Macau Nama Nama Situs Slot Online Bandar Togel Kamboja Bandar Togel Terpercaya Togel Hadiah 4d 10 Juta Terpercaya Agen Slot Agen Judi togel Resmi Situs Togel Terpercaya Situs Togel Terbesar Bandar Toto Terpercaya Agen Slot Gacor Togel Hongkong Judi Slot Online Hondatoto Ojktoto