A forum for reverse engineering, OS internals and malware analysis 

Forum for analysis and discussion about malware.
 #11666  by EX!
 Fri Feb 17, 2012 5:57 pm
zbot
SHA256: d692760e4614ae96f281522c80996e1ed9d31f29f5f9d4dbbd75481f649c2bb7
Detecciones: 1 / 42

NOD32 a variant of Win32/Injector.OEC 20120217


:D
Attachments
password = infected
(125.23 KiB) Downloaded 60 times
 #11690  by rkhunter
 Sat Feb 18, 2012 6:06 pm
markusg wrote:i think its zbot
SHA256:
3f2cc71d5aa1c91ff84ac32e2eb18c24e2ca9c57ef8999a210ba00e4636cff1b 
Not ZBot (already by behaviour).
But GEMA.

Image
  • 1
  • 4
  • 5
  • 6
  • 7
  • 8
  • 29