[Technical Paper] Disk Knight analysis (old usb-spread WORM)

[Luca91]

Hi all,

this is my analysis of Disk Knight, an old usb-spread worm (written in VB6) from 2007 that I first encountered at my school PC Lab around that time.

ENGLiSH VERSiON: https://lucadamico.dev/papers/malware_analysis/DiskKnight.pdf

iTALiAN VERSiON: https://lucadamico.dev/papers/malware_analysis/DiskKnight_ITA.pdf

I'm also attaching both PDF files here, just in case. 

 

I'm more interest in old-school malware that have an interesting background history behind them (for example, Disk Knight became a worm due to some programming errors), have nice/funny (or scarry) payloads or are motivated by some weird  physicological reasons: in other words anything that is not related to the creation of botnets, ddossing iditos and stealing cash/btc. If you know of any interesting malware, please share its sha256 so I can take a look and possibly write a paper about it. 

 

Thanks, 

Luca

 

DiskKnight.pdf DiskKnight_ITA.pdf