EvilGrab - KernelMode.info

EvilGrab

2 posts

2 posts

EvilGrab

#21049 by p4r4n0id
Thu Oct 03, 2013 5:30 pm

Hi,

http://blog.trendmicro.com/trendlabs-se ... s-in-asia/

Attached:
2E991260E42266DB9BCCFA40DC90AE16
7ED71CF0B98E60CC5D4296220F47C5A2

p4r4n0id

Attachments

pwd:infected
(181.82 KiB) Downloaded 66 times

Keep Low. Move Fast. Kill First. Die Last. One Shot. One Kill. No Luck. Pure Skill.
http://p4r4n0id.com/

Username

p4r4n0id

Posts

126

Joined

Thu Sep 22, 2011 11:36 am

Location

Israel

Contact

Re: EvilGrab

#21054 by patriq
Thu Oct 03, 2013 6:42 pm

Both of these samples talk to servers in HK

2e991260e42266db9bccfa40dc90ae16
jksuzi.gnway.net 123.254.109.197
https://malwr.com/analysis/MGU3YTYyMGIz ... hjZjFlMjc/
(a 404 error reveals IIS server in Chinese)

7ed71cf0b98e60cc5d4296220f47c5a2
www.avasters.com 219.90.127.80
https://malwr.com/analysis/YjY2Yjc5YWQy ... QyY2Y1MzE/

Username

patriq

Posts

109

Joined

Fri Jun 28, 2013 8:11 pm

Page 1 of 1
2 posts

Return to “Malware”

Display:

Sort by:

Sort by:

Jump to: