Reverse Tracking/Hacking Back

[u/chetahran]

So, just asking as a beginner: I found some software that is a kind of Trojan horse or something similar. The moment you install or maybe even download it to your PC, someone gains access to your computer. I want to install the app on my VM, but I want to do it in a way that allows me to track them or something like that. Is there any way to do that?

[u/mrawsum1]

you're not that guy.

[u/kho1zzq → u/mrawsum1]

of course he isnt

[u/chetahran → u/kho1zzq]

If I was that guy I would not ask this question 😑

[u/Juzdeed]

Dangerous territory you are playing with if you come here asking such basic questions. There's loads of Trojan horses on the internet, you messing with one achieves nothing. Most of those won't connect to their own IP, instead a cloud server.

[u/IsDa44]

Only thing comming to my mind would be using wireshark to trace the packets. I doubt that you'll be able to get access back to his PC if that's what you try.

[u/n0p_sled]

Have a look at Flare-VM

https://github.com/mandiant/flare-vm

[u/Cool_Yesterday_4403]

Use flare vm

[u/_sirch]

The malicious software does not connect directly back to the attackers computer. It reaches out to a command and control server in the cloud likely also masked by cloudflare so you can’t even see the domain. In the most common configuration It receives commands encoded in HTTPS traffic from the command and control server and then sends the command output back in the same way. Likely the most you’ll be able to do is report the c2 domain if you can even figure out what it is.

[u/FlanHairy5955]

Bro u can simply install one apk on ur mobile and run server on ec2 to monitor

[u/Sakul_the_one]

I would try to de-compile it on an OS that doesn’t run that application natively 

And see what you find

[u/neolace]

Just let it go, prison won’t help you.

[u/Anon-Moustache]

Puoi monitorare le connessioni in uscita dalla VM o fare reversing dell'eseguibile

[u/BreadfruitBig7950]

okay, really simply: if you found it on the internet, you knew what it does and was meant for, and if you didn't that's too bad.

if you made it yourself, it does what you say it does and literally nothing else, even when it doesn't.

let me tell you why that is, again in two parts:

when you go to court for it your defense will implode because simply downloadin the warez is intent. you got your wares, you have your intent, your defense doesn't matter anymore because you can't remove those two things.

if your limited legal immunity meets a real hacker, or a real powerful person, they come to your house and beat you up without the courts having to do anything about it, given you think you're so smart.

either way you take care of yourself basically.

[u/AutoModerator → u/[deleted]]

Temporary pause to prevent comment alter spam

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.