[p4r4n0id]

Hi,

Looking for samples with the fake MSN / Yahoo traffic mentioned here: http://blog.trendmicro.com/trendlabs-se ... ss-trojan/

was not able to upload the sample with the fake HTML traffic - d65cc2beed0f11ad0520c92023ac2709, I will try later again.....

10x,

p4r4n0id

[Xylitol]

d65cc2beed0f11ad0520c92023ac2709 in attachement, calling ddns.yourturbe.org (69.195.129.70)
edit: hmm it's broken.

[maddy]

PFA md5: d65cc2beed0f11ad0520c92023ac2709 sample

[p4r4n0id]

Thx guys but d65cc2beed0f11ad0520c92023ac2709 is a sample I already got, looking for the fake yahoo / msn ones ( no hashes unfortunately, thought maybe someone is familiar with them.... )

[p4r4n0id]

Found it :)

MD5: e3bec47b32dcd24e4c15693ab9af5113

This is the fake MSN traffic sample, connects to zjhao.dtdns.net.

Attached,
p4r4n0id