.zzzz extension from Word file
Attachments
password:infected
(300.93 KiB) Downloaded 128 times
(300.93 KiB) Downloaded 128 times
@xorsthingsv2
A forum for reverse engineering, OS internals and malware analysis
Bogdan-Mihai wrote:New version with .osiris extension.XLS dropper and Locky payload with .osiris extension as well.
https://www.bleepingcomputer.com/news/s ... extension/
If I catch one, I`ll post it here asap.
ikolor wrote:next..Locky encoded downloaded from:
https://www.virustotal.com/en/file/920a ... 485716276/
www.ruyssinck-demeyer.be/v4xo5r28BR,
ikolor wrote:next ..Locky ransomware encoded downloaded from:
https://www.virustotal.com/en/file/9033 ... 485793038/
http://jago-computerservice.homepage.t- ... de/poxs17bBR,