A forum for reverse engineering, OS internals and malware analysis 

Rogue Antimalware (FakeAV, 2012 year)

Forum for analysis and discussion about malware.
 Topic locked

Re: Rogue antimalware (FakeAV, FakeAlert)

 #12925  by thisisu
 Sat Apr 28, 2012 12:42 am
Windows Safety Checkpoint
FakeVimes - MD5: 329c833f9e3c05bf642647780daa33ca
https://www.virustotal.com/file/b7db6e4 ... 335573657/
Note: Largest filesize rogue in FakeVimes to date. Despite the aforementioned, this does not appear to be "installer" version. Protector-????.exe and "installer" are same MD5.
Attachments
pass: infected
(1.6 MiB) Downloaded 52 times

Re: Rogue antimalware (FakeAV, FakeAlert)

 #12933  by rough_spear
 Sat Apr 28, 2012 7:41 am
Hi All, :D

Here is another sample of Windows Safety Checkpoint.

web url 1 - hxxp://initialtube.in/hot/Flash_Player_v11.2_for_Windows.exe

web url 2 - hxxp://tubeoclock.in/hot/xxxvideo.avi.exe

VT link - https://www.virustotal.com/file/b7db6e4 ... /analysis/

MD5 - 329c833f9e3c05bf642647780daa33ca

Regards,

rough_spear. ;)
Attachments
password - malware.
(1.54 MiB) Downloaded 61 times
 Topic locked
  • 1
  • 15
  • 16
  • 17
  • 18
  • 19
  • 46
 Return to “Malware”