Skip navigation.
Home

Trojan.Win32.Kuang

For love of the old school and keeping it real I've run some older malware through some modern AV/MW detection software. Interesting results:

MD5: 4ea8483c238bdb7fb8daea13b0b61530
SHA1: 9991b460b4724334828c4dac6ca1d3eabb06df3e

AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found W95/Weird
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found Email-Flooder.Win32.Weirder (probable variant)
NOD32
Found nothing
Norman Virus Control
Found W32/Kuang-II
UNA
Found nothing
VBA32
Found nothing

Trojan.Win32.Kuang.C

MD5: 5ed9afff343091304bc13f481891ce38
SHA1: f43b56096baa163d9ab560533c642a87ede2c27a

AntiVir
Found Trojan/DUNpws.w
ArcaVir
Found nothing
Avast
Found Win95:Kuang
AVG Antivirus
Found W95/Weird
BitDefender
Found nothing
ClamAV
Found Trojan.PSW.Kuang.C
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
UNA
Found nothing
VBA32
Found nothing

Trojan.Win32.Kuang.D

MD5: 431702c81783c1c49cc86c083decf50f
SHA1: 18a4b19417bf7bdf94ebb9076e3b499e92fbe04c

AntiVir
Found Trojan/DUNpws.Bp
ArcaVir
Found nothing
Avast
Found Win32:Kuang
AVG Antivirus
Found W95/Weird
BitDefender
Found nothing
ClamAV
Found Trojan.DUNpws.Bp
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found Trojan-PSW.Win32.Kuang.b (probable variant)
NOD32
Found nothing
Norman Virus Control
Found W32/Kuang-II
UNA
Found nothing
VBA32
Found nothing

Trojan.Win32.Kuang.E

MD5: 5b22404f451933ce57e6cc3efbbef27f
SHA1: 00bba1945843a3081008634de56b99e0d5552d75

AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found W95/Weird
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found Email-Flooder.Win32.Weirder (probable variant)
NOD32
Found nothing
Norman Virus Control
Found W32/Kuang-II
UNA
Found nothing
VBA32
Found nothing

nice

I've talked to the guy who wrote Kuang :P (he is from ex-Yugoslavia like I am, he is from Serbia - I am from Croatia).

One of the first viruses with trojan-like capabilities, very small and easily mutable (since it's written in offset-independent way just like viruses) with external obsfucators. Has a very nice client-side GUI attractive for script kiddiez.

It is also (ironically) the very first malware I got infected with 4.5 years ago, after which i started reading Billy Belzebu's tutorial and the rest is history :P

It was originally published in 29 #4:

http://www.vx.netlux.org/29a/29a-4/29a-4.510