Hello.
I request cve-2015-0336,cve-2015-0342 sample.
fighting...
I request cve-2015-0336,cve-2015-0342 sample.
fighting...
A forum for reverse engineering, OS internals and malware analysis
CVE-2015-0336 samples attached.
Attachments
password = "infected"
(24.91 KiB) Downloaded 73 times
(24.91 KiB) Downloaded 73 times
ThankYou stevegs1821.
But attached swf is obfuscated. couldn't decompile.
Can you post another sample?.
But attached swf is obfuscated. couldn't decompile.
Can you post another sample?.
ktman wrote:ThankYou stevegs1821.What kind of exploit writer that publishes it to public doesn't obfuscate his code? 99% of malicious exploit samples are obfuscated.
But attached swf is obfuscated. couldn't decompile.
Can you post another sample?.
stevegs1821 wrote:CVE-2015-0336 samples attached.Thank you, Steve.
It seems f64c0be11dfe6f1caa5e7a807f2967f584219642ec875391b4d3f9b0c12523d5 file is corrupted.
Body of exploit in file aa01a5ac0952923abc361ae37841e02df45662b1839d7c89f5a44b12f1b3c412
payload is encrypted with strings with same length
payload is encrypted with strings with same length