Actual 14 samples.
Attachments
pass:infected
(3.14 MiB) Downloaded 82 times
(3.14 MiB) Downloaded 82 times
A forum for reverse engineering, OS internals and malware analysis
15 samples, observed since 6 Feb.
Attachments
pass:infected
(3.39 MiB) Downloaded 83 times
(3.39 MiB) Downloaded 83 times
12 samples of last 4 days
Attachments
pass:infected
(2.86 MiB) Downloaded 82 times
(2.86 MiB) Downloaded 82 times
16 samples of last two days
Attachments
pass:infected
(3.38 MiB) Downloaded 81 times
(3.38 MiB) Downloaded 81 times
zbot
SHA256: d692760e4614ae96f281522c80996e1ed9d31f29f5f9d4dbbd75481f649c2bb7
Detecciones: 1 / 42
NOD32 a variant of Win32/Injector.OEC 20120217
:D
SHA256: d692760e4614ae96f281522c80996e1ed9d31f29f5f9d4dbbd75481f649c2bb7
Detecciones: 1 / 42
NOD32 a variant of Win32/Injector.OEC 20120217
:D
Attachments
password = infected
(125.23 KiB) Downloaded 59 times
(125.23 KiB) Downloaded 59 times
i think its zbot
SHA256:
3f2cc71d5aa1c91ff84ac32e2eb18c24e2ca9c57ef8999a210ba00e4636cff1b
File name:
1C7E33AD86ED29744440.exe
Detection ratio:
3 / 43
https://www.virustotal.com/file/3f2cc71 ... 329582020/
securewebtests.com/lcr/tuktuk.php?id=38BA2BE7444E41537355cmd=img
SHA256:
3f2cc71d5aa1c91ff84ac32e2eb18c24e2ca9c57ef8999a210ba00e4636cff1b
File name:
1C7E33AD86ED29744440.exe
Detection ratio:
3 / 43
https://www.virustotal.com/file/3f2cc71 ... 329582020/
securewebtests.com/lcr/tuktuk.php?id=38BA2BE7444E41537355cmd=img
Attachments
(37.75 KiB) Downloaded 59 times
markusg wrote:i think its zbotNot ZBot (already by behaviour).
SHA256:
3f2cc71d5aa1c91ff84ac32e2eb18c24e2ca9c57ef8999a210ba00e4636cff1b
But GEMA.
New Sample - Low Detection
MD5: 492ae45cbeafb9daee2d4d6dc4d565ae
1/43
https://www.virustotal.com/file/bb60a94 ... /analysis/
dumped .tmp and .exe files from temp dir included in archive
:D
MD5: 492ae45cbeafb9daee2d4d6dc4d565ae
1/43
https://www.virustotal.com/file/bb60a94 ... /analysis/
dumped .tmp and .exe files from temp dir included in archive
:D
Attachments
Password: infected
(2.16 MiB) Downloaded 75 times
(2.16 MiB) Downloaded 75 times
11 droppers of last few days
Attachments
pass:infected
(1.97 MiB) Downloaded 112 times
(1.97 MiB) Downloaded 112 times
13 ZBot droppers, last few days observed
Attachments
pass:infected
(2.56 MiB) Downloaded 84 times
(2.56 MiB) Downloaded 84 times