Reversing an obfuscated java malware

[Extreme Coders]

This document is a small write up demonstrating tools and techniques that can be used while reversing java code.

The malware used for this purpose is the AlienSpy RAT (Remote Access Trojan) which has also been attached to this post. 

 

The password of the file malware sample.rar is infected. 

This is live malware. Secure your system before tinkering with it.

 

Additionally, the decompiled source code of the malware has also been provided for study.

 

Reversing an obfuscated java malware.pdf

malware sample.rar

decompiled malware source.rar

[crystalboy]

Very nice paper! I learned a couple of things from it that i can't wait to try!  Thanks a lot for sharing!