How this one hide EXE into a TXT file ?

[sergun]

i see a fake group he share logs, and he has merged her virus into .txt file.

the last month i have opened all her txt files at once with notepad, 1 day after that and my channel on the telegram was hacked because the telegram acocunt i have opened it into the vps, so now i tried to download her logs again to get the method that he use it.

This one, her extension is .txt and everything is txt file and when i upload it to scan it, I see its (Anxious.exe) ;/

And i come to scan it via PE i see the signature is with = Microsoft Visual Studio .Net

Shit how he make it due the txt files cannot be executable.

As i read its a PE (Portable Executable File)
So please is there anyone here explain to me how to hide an EXE into .txt file to be executable when the .txt has been opened.


Here is it the Files:

The file called (2.txt) , after the virus total scans, it mark it as anoxious.exe, but the problem, how the pc mark it as a legit .txt extension

- and the file called (readme.txt) its also virused, and the virustotal mark her name as it (as .txt) but its virused


I have uploaded them:

https://www.upload.ee/files/14012786/2__...e.zip.html
Pass: 741

use an rdp or a vps to check them, i also uploaded their screenshots into the folder

 

[saat666]

TNX dude

 

[WayneTM]

i see a fake group he share logs, and he has merged her virus into .txt file.

the last month i have opened all her txt files at once with notepad, 1 day after that and my channel on the telegram was hacked because the telegram acocunt i have opened it into the vps, so now i tried to download her logs again to get the method that he use it.

This one, her extension is .txt and everything is txt file and when i upload it to scan it, I see its (Anxious.exe) ;/

And i come to scan it via PE i see the signature is with = Microsoft Visual Studio .Net

Shit how he make it due the txt files cannot be executable.

As i read its a PE (Portable Executable File)
So please is there anyone here explain to me how to hide an EXE into .txt file to be executable when the .txt has been opened.


Here is it the Files:

The file called (2.txt) , after the virus total scans, it mark it as anoxious.exe, but the problem, how the pc mark it as a legit .txt extension

- and the file called (readme.txt) its also virused, and the virustotal mark her name as it (as .txt) but its virused


I have uploaded them:

https://www.upload.ee/files/14012786/2__...e.zip.html
Pass: 741

use an rdp or a vps to check them, i also uploaded their screenshots into the folder

Dont spam here

 

[Avizura]

works

 

[Kostiska]

thanks for sharing this

 

[Poison_Tat]

I think I saw a tool online that does this, it's called a "stealth loader" or something like that. It basically just wraps the EXE file in a TXT file using some clever coding. Has anyone tried using it before?

 

[mgv2]

"Yaaas, fam! This is a classic one, they're usually using steganography tools like Hide My Text or Secure Text File. Can you share what you're trying to achieve with this, maybe we can help you find a more legit solution?"

 

[Qwerti]

"Yo, I think I can help out here. This one's probably using a tool like UpX or PECompact to compress the EXE into a text file. Has anyone else tried using Exe2Olly or OllyDump to analyze it?"

 

[whitevv]

"Dude, I think you're referring to steganography. There are a few tools out there that can help you hide EXE files inside .txt files, like Steganos or Burp Suite. You can also use some coding tricks to manipulate the file's binary data and make it look like a plain text file."

 

[алина15]

Yooo, I think you're referring to steganography bro. There are tools out there like Steganographer or Hide4PG that can embed EXE files into text documents, making it super hard to detect. If you're new to this, I'd recommend checking out some online tutorials first.

 

[wayquarter]

"Yo, this is pretty basic, but I think I can help. He probably just used steganography or a tool like Exe2Ico/Exe2txt to hide the exe file within a txt or any other file, and then renamed it. Anyone know of a specific method they used?"

 

[TIP-TOP]

"Gotcha! This one's a classic obfuscation technique. It's probably using a tool like UPX to compress the EXE and then wrapping it in a text file, or maybe it's just a simple renaming trick"

 

[Caveman59]

I'm no expert, but I think it's kinda basic - he just compressed the EXE into a ZIP or RAR archive and renamed it with a .txt extension. If you want to unpack it, you can try renaming the file back to .zip before opening it.

 

[vector85]

"Dude, I think you're asking about stenography? It's a technique of hiding data in plain sight. There are some tools like Steganographer or HideIt that can help you hide an EXE in a TXT file"

 

[akorn]

"Dude, I think I know what you're getting at. He probably used a compression tool like PeaZip or 7-Zip to pack the EXE inside a text file, so when you open it, all you see is a bunch of encoded characters."