N3mes1s wrote:This time, ESETAttached ESET samples.
Win32/Napolar – A new bot on the block
p4r4n0id
A forum for reverse engineering, OS internals and malware analysis
p4r4n0id
Attachments
pwd:infected
(483.03 KiB) Downloaded 81 times
(483.03 KiB) Downloaded 81 times
Keep Low. Move Fast. Kill First. Die Last. One Shot. One Kill. No Luck. Pure Skill.
http://p4r4n0id.com/
http://p4r4n0id.com/
We will probably see new bins soon.
https://www.virustotal.com/en/file/2d3e ... 382536562/
https://www.virustotal.com/en/file/2d3e ... 382536562/
Attachments
infected
(2.37 MiB) Downloaded 85 times
(2.37 MiB) Downloaded 85 times
Source is for sale on exploit.in 100btc, looks like he is done with Solar.
Code: Select all
https://www.virustotal.com/en/file/62b7 ... 388589354/htxp://directxex.com/uploads/1883825547.awdsssaas.exe
http://www.cybertrack.pixub.com/Mousepad.exehttps://www.virustotal.com/en/file/23ed ... 388589710/
Attachments
infected
(529.86 KiB) Downloaded 62 times
(529.86 KiB) Downloaded 62 times
infected
(54.18 KiB) Downloaded 60 times
(54.18 KiB) Downloaded 60 times
Attachments
(84.88 KiB) Downloaded 42 times
ikolor wrote:I guess it is Malware ??????????Win32/Napolar SolarBot
https://www.virustotal.com/en/file/9647 ... 444761120/
osoperfume.com/errors/sols/
Downloads skmomohltd.com/city/Panel/Pony.exe
Which appears to be gone now but the panel is still up
Also a skmomohltd.com/city/sols.exe on that site
Attachments
(82.38 KiB) Downloaded 44 times