Attachments
(72.14 KiB) Downloaded 89 times
kmd wrote:https://www.virustotal.com/en/file/ab56 ... 362572589/Urausy.C, post moved.
pwd infected
A forum for reverse engineering, OS internals and malware analysis
Ring0 - the source of inspiration
Attachments
(52.9 KiB) Downloaded 82 times
Another one:
MD5: 0f28be3f285aaade36541228f3de0825
SHA1: 1fce514ebbca19d47ce70e7b7f9f93f6ef98ea02
VT: https://www.virustotal.com/en/file/4a64 ... /analysis/
MD5: 0f28be3f285aaade36541228f3de0825
SHA1: 1fce514ebbca19d47ce70e7b7f9f93f6ef98ea02
VT: https://www.virustotal.com/en/file/4a64 ... /analysis/
Attachments
pass: infected
(52.31 KiB) Downloaded 86 times
(52.31 KiB) Downloaded 86 times
Another one.
Attachments
(53.81 KiB) Downloaded 85 times
Three samples of Urausy used by Sibhost "Exploit Kit".
Md5: 7007f8704699837e95d1c023137e435f, c2020289d595a0ea5316b56ef32ea418, e80893875da723b2f4304dfca36e032e
Md5: 7007f8704699837e95d1c023137e435f, c2020289d595a0ea5316b56ef32ea418, e80893875da723b2f4304dfca36e032e
Attachments
pwd: infected
(148.72 KiB) Downloaded 81 times
(148.72 KiB) Downloaded 81 times
Attachments
Password: infected
(48.7 KiB) Downloaded 86 times
(48.7 KiB) Downloaded 86 times
Last edited by EP_X0FF on Mon Apr 08, 2013 2:10 pm, edited 1 time in total.
Reason: resized
10 samples
Attachments
Password: infected
(300.43 KiB) Downloaded 83 times
(300.43 KiB) Downloaded 83 times
Middle-East ransomware:
All credits to @Kafeine. Post:
http://malware.dontneedcoffee.com/2013/ ... under.html
All credits to @Kafeine. Post:
http://malware.dontneedcoffee.com/2013/ ... under.html
Attachments
(151.38 KiB) Downloaded 102 times
Hi! A client of mine just got infected with some kind of ransomware that Avira can't seem to detect.
Any idea what ransomware is and how to remove? Is starting only on the infected user.
Any idea what ransomware is and how to remove? Is starting only on the infected user.
Last edited by Xylitol on Thu May 02, 2013 11:45 am, edited 1 time in total.
Reason: Screenshot resized to be more accurate and reduced the size of 4Mb to 584 Kb