A forum for reverse engineering, OS internals and malware analysis 

Win32/Theola (Sinowal component)

Forum for analysis and discussion about malware.

Win32/Theola.A (Torpig)

 #11440  by evild3ad
 Sun Feb 05, 2012 8:39 am
Hello,

I'm looking for some newer indepth reports about the trojan 'Torpig'.
Here's the best report I've found: http://www.tidos-group.com/blog/?p=362

This report looked mainly at the 'Torpig' sample with MD5 of 70675a7053ae38adb77d70a056956684, first seen on April 10, 2011.
http://www.threatexpert.com/report.aspx ... a056956684
http://www.virustotal.com/file-scan/rep ... 1302476190

Can anybody help? Thx in advance.

Best regards
evild3ad

Re: Sinowal--Mebroot

 #11482  by Xylitol
 Tue Feb 07, 2012 1:19 pm
evild3ad wrote:Hello,

I'm looking for some newer indepth reports about the trojan 'Torpig'.
Here's the best report I've found: http://www.tidos-group.com/blog/?p=362

This report looked mainly at the 'Torpig' sample with MD5 of 70675a7053ae38adb77d70a056956684, first seen on April 10, 2011.
http://www.threatexpert.com/report.aspx ... a056956684
http://www.virustotal.com/file-scan/rep ... 1302476190

Can anybody help? Thx in advance.

Best regards
evild3ad
FFS there is a request thread.
Attachments
infected
(811.28 KiB) Downloaded 59 times

Re: Win32/Theola

 #18550  by EP_X0FF
 Sat Mar 16, 2013 8:37 am
Theola is the ESET name of Win32/Sinowal component. Posts merged.

edit:
Split again.
Last edited by EP_X0FF on Mon Mar 18, 2013 2:26 pm, edited 1 time in total. Reason: edit

Re: Win32/Theola (Sinowal component)

 #19622  by MountFranklin
 Thu Jun 13, 2013 4:38 am
Hello,

Anyone has a recent torpig sample, we need to understand more about this malware as it is currently targeting our brands. I would also appreciate if you could lead me to any recent resources dissecting this malware.

Thank you very much in advance.

Regards,
Frank
 Return to “Malware”