New Sample Ntos.exe[solved]

gkthornton

Look forward to your analysis.

Thanks

-GT

 

/applications/core/interface/file/attachment.php?id=19754" data-fileExt='zip' data-fileid='19754'>nt_os.zip

vlad

It's a spy (records data and uploads it on a server); detection added. Thanks!

Paddy

I've attached the ntos.exe file in a RAR archive. I used Sandboxie to get the file safely hehe. Great little program, that!

I noticed that there is another file that creates itself along with the ntos one. It's labelled "cals.exe", and I've attached that too.

I hope I've done this right...

Cheers!

 

 

/applications/core/interface/file/attachment.php?id=19756" data-fileExt='zip' data-fileid='19756'>nt_os.zip
/applications/core/interface/file/attachment.php?id=19755" data-fileExt='zip' data-fileid='19755'>cals.rar.zip

Unknown

Thanks, I got them.

Next time please use a password protected archive

regards,

Marius Botis