Keep Low. Move Fast. Kill First. Die Last. One Shot. One Kill. No Luck. Pure Skill.
http://p4r4n0id.com/
http://p4r4n0id.com/
How the hell they have decrypted the PGP files?A forum for reverse engineering, OS internals and malware analysis
Thanks for the info.
How the hell they have decrypted the PGP files?
How the hell they have decrypted the PGP files?
they haven't.
nothing new since the first breach, wikileaks just re-organised files
nothing new since the first breach, wikileaks just re-organised files
FinFisher Malware Analysis
Part 1 https://www.codeandsec.com/FinFisher-Ma ... r-Analysis
Part 2 https://www.codeandsec.com/FinFisher-Ma ... sis-Part-2
Part 3 https://www.codeandsec.com/FinFisher-Ma ... sis-Part-3
Dropper in attach.
MD5: 074919f13d07cd6ce92bb0738971afc7
SHA1: 9f9a18e81e9b39bd2f047004b8e3b4cb0fb505c9
SHA256: f827c92fbe832db3f09f47fe0dcaafd89b40c7064ab90833a1f418f2d1e75e8e
Part 1 https://www.codeandsec.com/FinFisher-Ma ... r-Analysis
Part 2 https://www.codeandsec.com/FinFisher-Ma ... sis-Part-2
Part 3 https://www.codeandsec.com/FinFisher-Ma ... sis-Part-3
Dropper in attach.
MD5: 074919f13d07cd6ce92bb0738971afc7
SHA1: 9f9a18e81e9b39bd2f047004b8e3b4cb0fb505c9
SHA256: f827c92fbe832db3f09f47fe0dcaafd89b40c7064ab90833a1f418f2d1e75e8e
Attachments
pass:infected
(723.64 KiB) Downloaded 55 times
(723.64 KiB) Downloaded 55 times
@rkhunter:
Awesome. This comes handy in my case. (I am learning malware reversing).
Thank you. :shock:
Awesome. This comes handy in my case. (I am learning malware reversing).
Thank you. :shock:
The analysis, that i don't pretend to understand, @ https://www.codeandsec.com shows this IP
184.82.101.234 - http://whois.domaintools.com/184.82.101.234 =But the Real one is,
Backlog Capital, LLC
Pilot Mountain
NC
USA
RegDate: 2014-07-02
Updated: 2014-09-08
www.backlogcapital.com = 206.188.193.106Same name & address. So are/were they either unknowingly highjacked, or in some "ways" are/were knowingly involved ?
Pilot Mountain
NC
US
Creation Date: 02-nov-2010
Malware = If your names not down, you're Not coming in !
