[tildedennis]

Hello,

I'm looking for a sample of:

a) Angry Cat Bot
c) A French DDoS bot advertised at http://pastebin.com/arNEacbG

Thanks.

[tildedennis]

MD5: a52ec18124254a13083ac82bfdb76327 from latest ad, http://pastebin.com/8yY00JET

No luck on VT or malwr.

[Xylitol]

Elementscanner don't share sample :/
ESET tag it as Win32/Botintin.A but i doubt this signature is reliable.

[R136a1]

ESET detection is correct, because Angry Cat Bot is a just patchwork based on Infinity Bot from 2011 (http://www.virusradar.com/en/Win32_Boti ... escription):

Source Infinity Bot: h**p://www.secret-zone.net/f124/%5Bc-%5D-infin ... -bot-5119/

Attached are 2 samples with a newer PE Timestamp (06/2013 and 09/2013). You have to check yourself if one of them is Angry Cat Bot, I don't want to waste more time with this crap...

[Xylitol]

mea culpa, haven't read the "Based on a source of simple HTTP botnet"
There is a C&C here

Code: Select all

hxxp://0xtv.biz/test/

v1.2.2 ;)