8

When searching for the source for Stuxnet, its relatively easy to come by in one form or another. Although I'm actually curious if anyone has done any work to comment the source and perhaps clean up variable naming and so on.

My real question is if anyone is aware of a source for the "Flame" virus source code. Its often mentioned as being the most advanced virus observed, so it would be interesting to see the source.

Thanks!

2 Answers 2

8

I can't find any (decompiled) source code of it, but I did find a rather thorough CrySys (Laboratory of Cryptography and System Security, Budapest) technical report (pdf). It covers pretty much all aspects of it, from how Skywiper works to how it propagates and infects. A short digest of it can be found in this blog (among many) and a few more links to other anti-virus labs' blogs here. I realize I didn't answer your question, though. I guess it's still too early for any of these labs to share their newly found lab pet and its thoroughly dissected innards with the rest of us. Their eyes probably roll not unlike the fruit slots machines do on a jackpot roll, and I wouldn't keep my hopes up that they'll release more on it until their eyes finally settle on banana. ;)

UPDATE: Found some downloadable samples but you'll have to ask for password, and another repository that requires registration. No reverse-engineered code yet...

1

I have taken a quick look at this git and it seams real: https://github.com/Zypeh/flame-sourcecode

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .