Hello and welcome to the ELAC project called Buzzwords Nifer in this project, we are going to be a
Trojan that will use the aero injection, the API hooking and persistence to steal disk encryption password.
The objective to write a Trojan that starts whenever the PC starts and monitors this encryption software
called the Electric.
I will show you how to install the crypt.
He use it.
When the user enters a password to mount a drive, the Trojan who steals the password and save to fight
their kid requires a password to mount a drive.
So the user who enter a password and the Trojan will detect it and say, we love her.
It is something like a keylogger, except that this one monitors a specific program.
I had actually.
How it works on the left is a diagram of a deer injector Trojan inside it.
It is embedded a password sniffer, the L B shocked.
So it is a complete executable file and that it inside.
On the right, it is the software we are going to download, install a free software that actually.
That is a decent group to.
The deer injected Trojan will be constantly running and constantly monitoring whether or not to electric
has slowed it.
Once he detects that occurring in memory, you unpack the denial that is embedded inside it into a far.
This is the passport sniffer guys are.
He will then inject this year into the very program.
So now the password sniffer idea has been attached to very.
In saying that there is a few API functions, but a passes, and if the only hook one of the API functions.
The API function that is hooking will be one which is responsible for receiving the password from the
user.
So the passes referred to the API function that will receive the password if the user enters.
He will then retrieve your password.
And save it to a file on disk.
So this is how it works from a high level perspective.
Thank you for watching.
In the next video, we will continue with the explanation of the court, an API that is used to beat
the intrusion as well as a password for.
She then.