[evild3ad]

Hi,

I've got this sample of the Matsnu loader as file attachment via spam...it comes with the banking trojan Urlzone. I've analyzed especially the mobile add-on of Urlzone.

http://www.evild3ad.com/3008/analysis-o ... o-urlzone/

Best regards
-evild3ad-

PW = infected