A forum for reverse engineering, OS internals and malware analysis 

Forum for analysis and discussion about malware.
 #29448  by EP_X0FF
 Tue Oct 18, 2016 7:25 am
ikolor wrote:Black Wonderful Life

https://www.virustotal.com/en/file/88e6 ... /analysis/
https://malwr.com/analysis/MWNiNzZmMmQz ... MyOTM5ZmI/


https://www.virustotal.com/en/file/3aae ... 472068849/
PL1029987456.docm - O97M/Madeba
arcasonow.exe - Arcabit Scanner online.

Arcabit attach removed, Madeba sample moved to separate thread.