October 30, 2022 at 10:26 PM
"Clippy" is a simple Windows Application that has two functions for preventing loss of funds from Malware running on Windows Systems.
Detection - Copies random* addresses from a set of different crypto currencies and places them in the clipboard, waits one second in the case of any delays from malware clippers (will make this customizable eventually), then checks the clipboard to see if they've been modified.. then notifying the user of any modifications.
Watch - Prints out any changes to the clipboard while the program is running.
usage:
Features:
- Detection or Watching Mode
- Saves current clipboard and restores it after test is complete
- Interacts with the System on a Low-Level using C, Malware won't be able to manipulate any results effectively, while maintaining the viability of a current, higher level language (Go)
- Very simple..
Planned Features:
- Random Addresses*
- Open Source (once in a final state i'll throw it on a VCS)
(ignore typo)
DOWNLOAD: https://gofile.io/d/JaL96L
VT (HYBRID): https://hybrid-analysis.com/sample/6d75a77dc90815c99ad0cac5aa89455f037cfd6fb0d9c4ca622792034f712017
Detection - Copies random* addresses from a set of different crypto currencies and places them in the clipboard, waits one second in the case of any delays from malware clippers (will make this customizable eventually), then checks the clipboard to see if they've been modified.. then notifying the user of any modifications.
Watch - Prints out any changes to the clipboard while the program is running.
usage:
clippy.exe (optional flag -watch set to 1 or 0, 0 is default/detection mode)Features:
- Detection or Watching Mode
- Saves current clipboard and restores it after test is complete
- Interacts with the System on a Low-Level using C, Malware won't be able to manipulate any results effectively, while maintaining the viability of a current, higher level language (Go)
- Very simple..
Planned Features:
- Random Addresses*
- Open Source (once in a final state i'll throw it on a VCS)
ImagesSpoiler
(ignore typo)
DOWNLOAD: https://gofile.io/d/JaL96L
VT (HYBRID): https://hybrid-analysis.com/sample/6d75a77dc90815c99ad0cac5aa89455f037cfd6fb0d9c4ca622792034f712017




