https://github.com/keowu/wintapix

Reversed WintaPix Malware Source code | That targets countries in the Middle East and abuse KeServiceDescriptorTable(SSDT), persistence and filesystem.
https://github.com/keowu/wintapix

malware poc reverse-engineering sourcecode-analysis wintapix

Last synced: 3 days ago
JSON representation

Reversed WintaPix Malware Source code | That targets countries in the Middle East and abuse KeServiceDescriptorTable(SSDT), persistence and filesystem.

• Host: GitHub
• URL: https://github.com/keowu/wintapix
• Owner: keowu
• License: gpl-3.0
• Created: 2023-08-05T19:08:11.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2024-07-06T23:20:44.000Z (7 months ago)
• Last Synced: 2024-07-07T00:25:47.206Z (7 months ago)
• Topics: malware, poc, reverse-engineering, sourcecode-analysis, wintapix
• Language: C
• Homepage: https://keowu.re/posts/Malware-Reverse-Engineering-Analyzing-and-Rewriting-the-WINTAPIX-Driver-and-Learning-From-It-English/
• Size: 50.8 KB
• Stars: 7
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
 WintaPix Malware - Reversed Source Code 




 Reversed WintaPix Malware Source code | That targets countries in the Middle East and abuse KeServiceDescriptorTable and persistence and filesystem.

 


To understand, it is recommended that a reading of my article be done and you can read it at the link below:

[Click here to read and understand the project on my blog article.](https://keowu.re/posts/Malware-Reverse-Engineering-Analyzing-and-Rewriting-the-WINTAPIX-Driver-and-Learning-From-It-English/)

Source code running on a PoC(English video):

 [](https://www.youtube.com/embed/AnIiWo3ASdw)