Shtirlitz 2.17

· Overview ·
· Origins ·
· Operation ·
· Detection and Removal ·
· Research ·

Overview

Vendor Notes:

Shtirlitz 2.17 from General Failure

Shtirlitz can send victim's passwords and other stuff entered in windows with "secret field" (e.g. "Passwords: *******") to your email. Shtirlitz consists of 2 files: MSTConfig.exe --- configurator program shtirlitz.exe --- trojan (should be sent to victim after configurating).

You may configurate shtirlitz.exe to your email and needed SMTP server through which mail be sent (you may use default)... Run MSTConfig.exe and press "Open EXE...", then open shtirlitz.exe and enter in the field "EMail Addr" your email address (I may use your real own mail box - nobody will see it, it'll be encoded in shtirlitz.exe), connect to internet, enter SMTP server's hostname and press "Lookup IP" - IP address of SMTP server will appear instead of hostname (you may write IP if you know and don't connect to Internet to look it up). Then press "Save data", "Quit". Now your Shtirlitz.exe is configured. You may rename it and send to victim. Please, don't try to attach Shtirlitz to any executable file - it won't work! :( version 2.17 doesn't allow to attach to exe files with for example SilkRope. You may rename shtirlitz exe to any name you like.

Once infected victim's windows will allway run Shtirlitz and it'll try every 3 minutes to connect to SMTP server and send detected passwords (method of detection is the same as in GF) to your email.

Good luck!

GF.

Alias:

Category:

Password Capture: A variant of the Key Logger that captures passwords as they are entered or transmitted. Some password capture trojans impersonate the login prompt, asking the user to provide their password.

Trojan: Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.

Similar Pests:

Origins

Author:

Programming Language:

Date of Origin:

Place of Origin:

Operation

Storage Required:

Restart:

ScreenShot:

Detection and Removal

Automatic Removal:

PestPatrol detects this.

PestPatrol removes this.

Manual Removal:

Research

File Analyses:

• Shtirlitz 2.17: mailshtirlitz.exe ·  mstconfig.exe ·  shtirlitz.txt

More Info:

Research By:

Last Revised: