A forum for reverse engineering, OS internals and malware analysis 

RockLoader

Forum for analysis and discussion about malware.

RockLoader

 #28239  by Xylitol
 Thu Apr 07, 2016 3:34 pm
Locky Ransomware Cybercriminals Continue Email Campaign Innovation, Introduce New RockLoader Malware ~ https://www.proofpoint.com/us/threat-in ... er-Malware

rockloader original version: http://vxvault.net/ViriList.php?MD5=A93 ... DD80966432
rockloader updated version: http://vxvault.net/ViriList.php?MD5=B0C ... B7A88D11E1
Attachments
infected
(77.23 KiB) Downloaded 83 times

Re: Locky ransomware

 #28345  by EP_X0FF
 Tue Apr 19, 2016 1:05 pm
Xylitol wrote:rockloader original version: http://vxvault.net/ViriList.php?MD5=A93 ... DD80966432
rockloader updated version: http://vxvault.net/ViriList.php?MD5=B0C ... B7A88D11E1
Laughable "UAC bypass" module from the above piece of modern malware in attach.
Attachments
pass: malware
(4.67 KiB) Downloaded 58 times
 Return to “Malware”