[Mosh]

Sample found on 66.147.244.116 with the names: Pago_ID4323466.zip and OrdenES328721.zip

MD5: 0097807174360134c88dcd682ff38c78
SHA1: ffcb9663d5984824926b9311e67e2e6af3376217
SHA256: f156f440e2f05777aa22d1655fabfcf61acf7109a1a202b0d7cfa891dd3fc315

https://www.virustotal.com/es/file/f156 ... 440226587/
https://malwr.com/analysis/MmRmOTU4ZWUx ... U3ZmM5YWE/

[tWiCe]

Looking for a file or hash of Tinba 2.0

http://www.secureworks.com/resources/ti ... sian-banks

[nfx]

Attached.
https://www.virustotal.com/en/file/8c74 ... /analysis/

[pwnslinger]

Hi guys,
I need new variant of simbda (curious about some VM-detection checks :lol: )

Trojan/Win32.Tinba
VT url : https://www.virustotal.com/en/file/476f ... /analysis/

Gratz
Pwnslinger

[thehole2]

Attached

[roskyfrosky]

Anyone has seen some samples alive that download config lately?

I have a lot of samples but only connect with sinkholes....

Thanks in advance.