A forum for reverse engineering, OS internals and malware analysis 

Rogue Antimalware (FakeAV, 2012 year)

Forum for analysis and discussion about malware.
 Topic locked

Re: Malware Requests, part 2

 #15442  by Xylitol
 Fri Aug 31, 2012 8:58 am
prim wrote:Hi. I'm looking for malware:
MD5: c05c2118f9c90bf9e1837b37fca33ba0
https://www.virustotal.com/file/7057c70 ... /analysis/
Attachments
infected
(466.28 KiB) Downloaded 57 times

Re: Rogue antimalware (FakeAV, FakeAlert)

 #15465  by rough_spear
 Sat Sep 01, 2012 11:42 am
Hi All,
14 samples of platinum Security suite 6.3.1.
also web urls

i also found that it download the Platinum Security Suite from the below Url.

hxxp://209.20.78.241:84//get/3b0c6a8305cc89cf77f3c9616a569e78.exe

Regards,


rough_spear. ;)
Attachments
(675 Bytes) Downloaded 41 times
password - infected.
(352.28 KiB) Downloaded 62 times

Re: Rogue antimalware (FakeAV, FakeAlert)

 #15473  by thisisu
 Sat Sep 01, 2012 5:38 pm
Win32:Virut wrote:Braviax family.

Win 8 Security System
Two writeups (thanks TonyKlein for share)

http://hitmanpro.wordpress.com/2012/08/ ... s-rootkit/
http://blogs.mcafee.com/mcafee-labs/win ... us-malware

__

It's a Necurs/Bubnix rootkit right?
http://www.virusradar.com/Win32_TrojanD ... escription

I didn't see that any of the blogs mentioned its name.
 Topic locked
  • 1
  • 38
  • 39
  • 40
  • 41
  • 42
  • 46
 Return to “Malware”