• Tidak ada hasil yang ditemukan

Malware Payload

N/A
N/A
Alfin Egriansyah

Academic year: 2024

Membagikan " Malware Payload"

Copied!
71
0
0

Teks penuh

Cobcbcj`j`uouoioococb, b, sfsfkckcoc oc pupudi di sysyugugur ur gfgfbcbc`i`ircrct t COCOOCOCB B Q[Q[P P ychychk k tftfococbb jfoijpcbgch rcbjct `ch bi`cycb-Hyc sfbihkkc pfhuois `cpct j focgschcgch gfrdc jfoijpcbgch rcbjct `ch bi` cycb-Hyc sfbihkkc pfhuois `cpct jfocgschcgch gfrdc prcgtfg. CooCoocb Q[P yccb Q[P ychk sfhhk sfhcticticsc jfcsc jfjlfjlfrigrigch lfrgch lfrgcb `ch rccb `ch rcbjcbjct-Ht-Hyc gfpyc gfpc`c pfhc`c pfhuoiuoiss sfocjc gflfrdcochch gfrdc prcg tfg `ch pfhuoisch ocpmrch. 9 ychychkk tfocb jfjlfrigch gfsfjpctch uhtug jfocgschcgch gfrdc prcgtfg pfruscbcch- tfocb jfjlfrigch gfsfjpctch uhtug jfocgschcgch gfrdc prcgtfg pfruscbcch- hyc.

QfoQfouruurub pibcb pibcg ychk tig ychk ti`cg li`cg lisc `issc `isflutflutgch ychgch ychk tfoc tfocb jfjcb jfjlchlchtu pfhutu pfhuois lois lcig prjc cig pcfocg. Qfkcoc uscbc tfocb pfhuois ocgugch `fhkch sflcig ‐ lcighyc, hcjuh pfhuois Qfkcoc uscbc tfocb pfhuois ocgugch `fhkch sflcig ‐ lcighyc, hcjuh pfhuois ^P. Jctc guoicb P^ 5<>11 Gfrdc prcgtfg jfrupcgch prmkrcj pfh`i`igc5<>11 Gfrdc prcgtfg jfrupcgch prmkrcj pfh`i`igchh pfrkuruch tihkki ychk tfrtuchk phk tuchk phcki tfrtuchk `cocj guriguouj pfhkcdcrch ` die durusch Pfghig.

C`cpuh wcgtu pfocgschcch gfkictch Gfrdc ^rcgtfg lfrochsuhk pc`c tchkkco < Jcrft- <; Jcrft <><>. Jftm`f gfrdc prcgtfg `iocgschcgch c`cocb Qtu`i oitfrctur, Guhduhkch Jftm`f gfrdc prcgtfg `iocgschcgch c`cocb Qtu`i oitfrctur, Guhduhkch ocpchkischkh `jhlich

PIHDCVCH OC^CHKCHPIHDCVCH OC^CHKCH

JfjJfjctuctubi bi ctucturch rch `ch `ch pfrpfrsycsycrctrctch ch ychk ychk lfrlfrocgocgu/ru/rfoffofvch vch tfrtfrgcigcit t lislishishis pfruscbcch `ch ti`cg tfrofpcs `fhkch G1O. Puduch `ch `ch scsscscrccrch h pfrpfruscuscbcch bcch (is(isi i jfhjfhacguacgup p ihtihtfkrfkrcsi csi gflgflidcidcgchgch jutu, G1 `ch oihkguhkch), ychk dukc jfhkcau gfpc`c tcrkft ugur pfochkk pogl. jutu, G1 `ch oihkguhkch), ychk dukc jfhkcau gfpc `c tcrkft ugur pfochkkch. Jfjluct Jfjluct chkkcrch chkkcrch licyc licyc mpfrcsimhco mpfrcsimhco `ch `ch jfhkfvcoucsi jfhkfvcoucsi feeisifhsi feeisifhsi lu`kftlu`kft mpfrcsimhco.

JJfhfhkfkfoomomoc c ssftftiicp cp ucuchk hk ycychk hk jcjcssug ug gf gf pfpfruruscscbcbcch ch `c`ch h jjfhfhkfkfoomomocc pfhkfoucrch-pfhkfoucrcch pfhkfoucbcch. Jfhkcwcsi Jfhkcwcsi `ch `ch jfjpfrbctigch jfjpfrbctigch sfkcoc sfkcoc gflutubch gflutubch ychk ychk `ilutubgch `ilutubgch `i`i ocpchkch. CVPBM\IPY cpccpclilioc oc jfjfhfhfjujui i gfcgfc`c`cch ch `ch `ch sisigcp gcp gfgfrdrdc c ychychk k titi`c`cg g jfjfhubi stch`cr` gfsfocjctch.

Jfjlchtu Jfjlchtu jfjluct jfjluct ocpmrch ocpmrch luochch luochch tfrgcit tfrgcit jfsih jfsih `ch `ch chkkcrch chkkcrch ychkychk su`cb lfrdcoch jcupuh ychk cgch `irfhachcgch. Gftfrsf`icch Gftfrsf`icch chkkcrch, chkkcrch, sujlfr sujlfr `cyc `cyc lfrgucoitcs lfrgucoitcs `ch `ch ecsioitcs/screcsioitcs/scrchc-chc- scrchc pfhtihk ocihhyc.

PFM\I @CQC\

Qfsuci gflutubch, gflutubch, bfhtcgch bfhtcgch cgch cgch `ibfhtigch `ibfhtigch sfbihkkc sfbihkkc cir cir `ch `ch puihk-puihk- puihk. Vgurch rch rik putcr rik putcr tfrtfrkchkchtuhtuhk k pc`c lfrct pc`c lfrct `ch `ch gflugflutubtubch ch `cyc ychk`cyc ychk tfrgcit `fhkch gf`cocjch sujur. Lmr Lmr gfrcb gfrcb lfrct lfrct - - pipc pipc lmr lmr lfr`ihlfr`ih`ihk `ihk ychk ychk tfjpctfjpctt lfrct.

ML [ML tihtihkki kki `ch `ch gfagfafpctfpctch ch putputcrccrch h rfhrfh`cb `cb `cp`cpctct jfh. JihJihycg ycg -lf-lfrlcrlcsis sis sisistfstfj j lfrlfrchtchtcgch cgch `ch `ch `cp`cpct ct jfjjfjioiioigi gi `cj`cjpcg pcg hfkctie tfrbc`guhch oihk digbc. Digc Digc lfrct lfrct oujpur oujpur tfrotfrocou cou tihkktihkki, i, ercgtercgtur ur ychk ychk ti`cti`cg g `iihk`iihkihgch ihgch `ch`ch biochkhyc oujpur gf `cockhyc oujpur gf.

Lckich Lckich ocih ocih `cri `cri sissistfj tfj gmhtrgmhtrmo mo sujur sujur c`cocb c`cocb pfhafkcpfhafkcb b sfjlursfjlurchch (LM^). LM^), , kcris kcris gfaiogfaio, , `ch `ch kcris kcris tfraftfrafgig gig `ch `ch lfrjcalfrjcacj-jcacj-jcacj cj tfraftfrafgig.

LCL IULCL IU

Digc risfr Digc risfr tfgchch tfgchch tihkki `ch tihkki `ch sistfj QLM^ sistfj QLM^ `cpct`cpct.

FJLCBCQCH

LoLomw Mmw Mut ut ^r^rfvffvfhthtfr Ffr Fquiquipjpjfhfht st sysystftfj pcj pc`c `c LJLJQ #Q #>6>6 LM^. Cgujuoctmr tfr`iri `cri tcluhk-tcluhk ychk jfjioigi tfgchch 3<>> psi `i sfticp tcluhk, dujocb tcluhk pc`c cgujuoctmr jfjioigi tfcjo tfgch> tclu hk pc`c cgujuoctmr. LJQ#>5 #>5 jfjjfjlugc lugc `fhk`fhkch ch acracrc c jfhjfhkbikbituhtuhk k putputcrccrchh euoo euoo vcovfvcovf pc`c pc`c vcovfvcovf uhtug jfhkftcbui.

Abmgf jchAbmgf jchiemoiemo`` pc`c pc`c rik rik ljs ljs #>6 #>6 c`cocb c`cocb prm`ug prm`ug ychkabfhk schyi pj,am.ot`. Lfreuhksi uhtug tfjpct pfjcschkch abmgf oihfabmgf oihf (ychk jfhsirguocsigch (ychk jfhsirguocsigch giag . giag gfoucr `cri oulchk lmr) `cgfoucr `jkh ofgi ofgi ofgi). Jixihk bmppfrbmppfr pfrcoctch pfrcoctch ihi ihi lfrlfhtug lfrlfhtug amrmhk amrmhk ychk ychk `ipcgci `ipcgci uhtug uhtug jfhcjlcbgch lcbch oujpur lfrlfhtug lcbch oujpur lfrlfhtugg lfrlfhtug tfpuhk gf`cocj acirch ihdfgsi pc`c wcgtu pfrcwctch oujpur `itchgi oujpur .

Qcatimh mh oihfoihf c`coc`cocb cb pippipc-pc-pipc ipc ychk ychk tfrtfr`cpc`cpct t `i `i rchrchkgcikgcich ch sirsirguoguocsicsi sistfj. Abigsfh dmiht c`cocb scjluhkch ychk `ikuhcgch uhtug jfhkbuluhk c`cocb scjluhkch ychk `ikuhcgch uhtug jfhkbuluhk stch` pipf. Abigsfh dmiht Abigsfh dmiht ihi lfrkuhc uhtug jfhkbcjlct tfgchch sfbihkkc coir ihi lfrkuhc uhtug jfhkbcjlct tfgchch sfbihkkc coir eoui`c ti`cg eoui`c ti`cg ochksuhk `fhkch tfgchch ychk tihkki, c`c lflfrcpc tiff ugurch ychk `ikuhcgch pc`c rik LJQ#>6 chtcrc ocih 4.

Pfr`cpct lflfrcpc lckich pc`c systfj chkgct (bmistihk systfj)b Mistihk systfj) ychk ychk lfrc `c pc`c. Fofvctmr jfrupcjfrupcgch gch coct coct ychk ychk tfrbultfrbuluhk uhk `fhkch`fhkch oihg oihg `ch lfreuhksi `ch lfreuhksi uht.

C`cocb ocb sflsflucb ucb jfsjfsih ih ychk ychk `ik`ikuhcuhcgch gch uhtuhtug ug jfhjfhkchkkchkgct gct lfh`lfh`c c sfasfacrccrc bm.

LCL ULCL U

FHVPV^

QiQiststfj pfjlfj pfjlmrmrch pc`c \IK #>6 ch pc`c \IK #>6 LJLJQ Q sisiststfjfj dml dml wfoo wfoo sfrviafsfrviaf ycitu scjc ycitu scjc. IK uhtug jfhkurchki tfrdc`ihyc gfafocgcch gfrdc `ch ti`cg jfhkurchki tfhckc `cri \IK tfrsflut.

CEPC\ ^VQPCGC

Referensi

Dokumen terkait

We need to investigate the suitable parameter used to identify the behaviour of android malware in order to generate the attack pattern of malware and do the

Oleh itu, Analyzing the Anserverbot Android Malware Behaviors through Static adalah sebuah analisis yang dijalankan secara statik bagi mengenalpasti tingkah laku Anserverbot

File malware div.exe, ikhtisar teknik reverse engineering diawali dengan mencari informasi mengenai Malware WEBC2-DIV tersebut, pencarian informasi menggunakan

Hasil dari penelitian dengan analisis dinamis dan reverse engineering dengan menggunakan tahap disassembly menunjukkan pergerakan dari malware dimana malware ini

Kemudi- an relawan diminta melakukan pendeteksian malware (scanning) pada komputer atau laptop yang dimiliki dengan aplikasi tersebut.. Setelah pendeteksian malware selesai,

Bersamaan dengan Pertemuan Tahunan IX ini, ID-CERT juga menyelenggarakan ID-Malware Summit II dengan tema Smartphone Malware and Fileless Malware karena mengambil pokok

“ Adapun klasifikasi malware dibutuhkan guna untuk mengelompokan malware pada family nya masing masing sesuai data yang di peroleh selama ini untuk

1.2 Rumusan Masalah • Bagaimana cara mendeteksi malware yang melakukan aktivitas yang berbahaya • Bagaimana cara merekam aktivitas dari suatu malware • Bagaimana cara mengirim