Skip to content

Instantly share code, notes, and snippets.

@0x27
Created March 21, 2016 01:46
Show Gist options
  • Save 0x27/880ebbc5fd6928313121 to your computer and use it in GitHub Desktop.
Save 0x27/880ebbc5fd6928313121 to your computer and use it in GitHub Desktop.

Preview of vtscantar (which is going to be re-integrated into hfsdown). Only alerts on the files in the tar that are flagged by VirusTotal.

hack@theplanet:~/vtscantar$ python vtscantar.py ~/hfsdown/output/mirror-118.193.176.22.tar 
Scanning: /home/hack/hfsdown/output/mirror-118.193.176.22.tar
Infected File: DANDNA.apk -> SHA256sum: 72a0745d835d15a707580e3df36396fb2598d61314bb740772a36150d682ea12 -> VirusTotal: 22/55
Infected File: svchost.exe -> SHA256sum: 640525b3d664fe8ae8c861276c15dfec60f6f19db26669dcf28b13620cfced9d -> VirusTotal: 38/53
Infected File: ���22_sign.apk -> SHA256sum: 23f6e9b5e5ba85621d8b7403390825aa767ff6da28132e025844fba1e1ef47f2 -> VirusTotal: 21/54
Infected File: ���˽�_sign.apk -> SHA256sum: 37b02bbfec667862b4f6adcc0429d46e93e7a159244d6ffbf2af27d035d903f5 -> VirusTotal: 22/54
hack@theplanet:~/vtscantar$ python vtscantar.py ~/hfsdown/output/mirror-120.26.227.237.tar 
Scanning: /home/hack/hfsdown/output/mirror-120.26.227.237.tar
hack@theplanet:~/vtscantar$ python vtscantar.py ~/hfsdown/output/mirror-122.114.56.242.tar 
Scanning: /home/hack/hfsdown/output/mirror-122.114.56.242.tar
Infected File: FunCTion.exe -> SHA256sum: d96b1c938787c76ccb3536d522c828244fd2783732b570ded90577fe7ccaf9c6 -> VirusTotal: 37/54
Infected File: server.exe -> SHA256sum: e110990a7f629e6c0f77ce1909a9ec0a9978f58f754975619bcdaa62b72c29c5 -> VirusTotal: 41/55
hack@theplanet:~/vtscantar$ python vtscantar.py ~/hfsdown/output/mirror-218.30.35.27_8080.tar 
Scanning: /home/hack/hfsdown/output/mirror-218.30.35.27_8080.tar
hack@theplanet:~/vtscantar$ python vtscantar.py ~/hfsdown/output/mirror-203.195.235.39.tar 
Scanning: /home/hack/hfsdown/output/mirror-203.195.235.39.tar
Infected File: NetSyst81.dll -> SHA256sum: ac3b2cebb3f7a50fa237be97b07afa6f68be712e932f57074444e0c02e4d8342 -> VirusTotal: 9/53
Infected File: SB360.exe -> SHA256sum: 8a85d68ad651e046a80ecd3e90ed45b63046e13bed993ebe7dbfa5f3e5b0ef42 -> VirusTotal: 49/54
hack@theplanet:~/vtscantar$ python vtscantar.py ~/hfsdown/output/mirror-58.221.42.91_8080.tar 
Scanning: /home/hack/hfsdown/output/mirror-58.221.42.91_8080.tar
hack@theplanet:~/vtscantar$ 
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment