So far we have discussed Trojan horse viruses’ characteristics and how to protect your computer from contracting a Trojan horse virus, I’d like to discuss another example of a Trojan horse virus named Beast.
Beast 2.07 guide First of all, I would like to say, that this tutorial has been provided for educational use, and that is its sole purpose Now before we get into anything too complicated, I would like to explain (very simply) about how trojan horses work. The latest version of BEAST 2 is version 2.6.5. To install this version, first install BEAST v2.6.4 by selecting one of the following to download the version for your operating system: Download for Windows without java (8MB) /with java (45MB) Download for Mac OS X without java (8MB) /with java (46MB).
In 2002, Beast was created. It was a Windows-based backdoorTrojan horse, more commonly known in the underground hacking community as a Remote Administration Tool or RAT.
It can affect Windows versions 95 to XP, and was created by Tataye in 2002. It became very popular due to its unique features that used the typical client-server model (where the client would be under operation by the attacker and the server is what would infect the victim).
Beast was one of the first Trojans to feature a reverse connection to its victims; that is once it was established, the hacker was able to completely control the infected computer. It mainly attacked these three sites:
- C:Windowsmsagentms****.com (Size ranging from 30KB to 49KB)
- C:WindowsSystem32ms****.com (Size ranging from 30KB to 49KB)
- C:Windowsdxdgns.dll or C:WindowsSystem32dxdgns.dll (Location dependent on attacker’s choice)
It was using the injection method to inject viruses into specific process, commonly “explorer.exe” (Windows Explorer), “iexplore.exe” (Internet Explorer), or “msnmsgr.exe” (MSN Messenger) to steal information and give control to its author of your computer (K).
With Windows XP, you could remove the three files listed above in safe mode with system restore turned off and then you could disinfect the system.
Beast came in with a built in firewall by passer and had the ability to end anti- virus or firewall processes.
Another feature of Beast was that it had a binder feature that could be used to join two or more files together and then change the icon. Once connected to the victim Beast could manipulate files, terminate or execute services, applications, and processes managers; get access to stored passwords, power options (turn on/off, crash, reboot), and even chat with the client they were attacking (Beast).
Sources:
“Beast (Trojan Horse).” Wikipedia. Wikimedia Foundation, 21 Apr. 2014. Web. 22 Apr. 2014.
K, Rajnish. “Top 10 Most Dangerous Computer Viruses of the Decade Updated 2012.” Tech Twisted Technology Blogging. N.p., 20f Feb. 2012. Web. 22 Apr. 2014.
Beast 2.07 guide
Beast 2.07 guide
Beast 2.07 guideFirst of all, I would like to say, that this tutorial has been provided for educational use, and that is its sole purpose
Now before we get into anything too complicated, I would like to explain (very simply) about how trojan horses work. They are not your average virus, they give you the power to connect to a ‘victim’ remotely, and do a variety of things. Anything, to be precise. There are 2 main components to a trojan, a client (the tool you use to connect to the victim), and the server (the file the the victim runs which enables you to connect to him). The client is used to create server.exe files with custom settings which you specify to enable successful connections.
Sometimes the AV will delete the files or tamper with them, so to be on the safe side shut down your AV then re-download or re-extract the files to be sure they are in correct working order. Note, you will most likely need to manually kill all the processes associated with your anti-virus in order to successfully terminate it.
Dont be alarmed, this file will not harm you whatsoever. When your antivirus dissembled this file, it containted strings that the antivirus deemed harmful, because it finds these same strings in viruses. (geeeezzz i wonder why … Could it be that this tool creates viruses? ) So id suggest turning off your antivirus just while you build the server, and while you send it to ‘people’, because your AV will prevent you from opening the client and will delete any server files you attempt to create.
This tutorial is written and designed around the Beast 2.07 Trojan. It is the most advanced version of the beast, and still remains the best by far. Its loaded with features and is simply hard to beat.
In this tutorial, I will explain how to configure a simple yet effective server file, and also explain what do do from there, and how to obtain valuable D2 Information once connected.
Part 1: Creating your Server and Examining The Beast
This step, believe it or not, is one of the most important. There are tons of options you can have when making a server file, but most arent necessary and increase chances of detection. This section will explain what is necessary and what isnt, and how to make the smallest server possible.
*NOTE* You should have disabled your AV by now.
Step one, would be to load Beast2.07.exe, after you have download Beast2.07.zip and extracted its contents. As you can see, beast has a friendly layout and is easy to use once you are properly educated.
Right on the main screen are 3 important text-fields, and a 2 important buttons.
Fields:
Host (Where the victims IP goes)
Post (Port you specify)
Password (password you Specify)
Go Beast (Connect to Victim)
Build Server (Create a custom server)
~Other Stuff~
The host field is where the IP of the victim goes (will explain more about this later), port is where the port you specified goes, and password is where the password you specified goes. Go Beast sends the connection request, and if everything is right it will connect.
Build Server is the button you want for this example. This button allows the creation of a new, and unique server for your own personal use.
Go Ahead and click that now.
The program will immediately open up a new window, with 6 tabs on the lefthand side, and the first tab opens automatically. Now you might say, “OmG This is confusing help!” … and thats what everyone said at first, but im here to help 8)
The first thing were going to do, Is configure your servers connection settings. Remember the port / password on the main page? Thats where you specify both of those values. Also, you set up connection information (injection, where it will reside, and other important details) here.
The first most important connection setting, is how it will actually connect. There are 2 options here, and I will explain how both of them work. There are a variety of things a victim could have that could hinder connection settings, such as a router or a computer firewall, or a router that has a firewall! If they have any of these things, chances are slim you will not be able to connect to them, but there are ways around that you will come to find.
Free Anti Trojan Download
1) SIN Connection
A SIN connection is a reverse connection .. specifically designed for people using routers. When an individual has a router, it will prevent you from directly connecting to them … so instead of you connecting the server, the server connects to you. However, SIN does not work that much and its not very effective to use.
Beast 2.7 Trojan Download Virus
2) Direct Connection: This method of connection allows you to connect right to the victims computer from your own. Its the most successful, and also the fastest / easiest way to get what you need.
So now, after reading that, lets go ahead and configure it. I will simply tell you what to put, and it will work
Trojan Downloader
Wow .. finally! Click the ‘Save Server’ Button, and specify where you would like your server.exe file to go.