A forum for reverse engineering, OS internals and malware analysis 

Forum for analysis and discussion about malware.
 #14308  by mikeinhouston
 Tue Jun 26, 2012 10:54 pm
I found this article http://www.esecurityplanet.com/malware/ ... lware.html
about a worm that steals AutoCad drawings and sends them to China (among other things).

I searched VirusTotal for ACAD/Medre.A and did not see any hits. Is anyone familiar with this?

If this is industrial espionage from China it would be prudent to get familiar with it and how it works.

I'm looking for a sample. If anyone has one, can you provide a sample?
 #14311  by hnpl2011
 Wed Jun 27, 2012 4:52 am
mikeinhouston wrote:I found this article http://www.esecurityplanet.com/malware/ ... lware.html
about a worm that steals AutoCad drawings and sends them to China (among other things).

I searched VirusTotal for ACAD/Medre.A and did not see any hits. Is anyone familiar with this?

If this is industrial espionage from China it would be prudent to get familiar with it and how it works.

I'm looking for a sample. If anyone has one, can you provide a sample?
http://www.kernelmode.info/forum/viewto ... =40#p14154