ReviewsAntivirus wrote:Fake MSE Alerthttps://www.virustotal.com/file/9d0e070 ... 345500710/
Attachments
infected
(11.83 KiB) Downloaded 79 times
(11.83 KiB) Downloaded 79 times
A forum for reverse engineering, OS internals and malware analysis
Does anyone have a sample of the Yorkshire Police malware please?... would be very grateful.
Xylitol wrote:Thanks guys. These are loaders. Anyone has the actual payload (fake MSE)?ReviewsAntivirus wrote:Fake MSE Alerthttps://www.virustotal.com/file/9d0e070 ... 345500710/
Attachments
Password is "infected" without quotes
(155.52 KiB) Downloaded 117 times
(155.52 KiB) Downloaded 117 times
Ransomware
Attachments
Password is "infected" without quotes
(883.54 KiB) Downloaded 92 times
(883.54 KiB) Downloaded 92 times
Trojan.Ransom - Epubb
VirusTotal:
VirusTotal:
Code: Select all
ThreatExpert:
https://www.virustotal.com/file/496c6432ca3508104e6314093e087e313945b5d4262f3f06b84cd96ac3e9e0f9/analysis/Code: Select all
http://www.threatexpert.com/report.aspx?md5=245d4c1c2024cd16dc8c62927f81b7b8Attachments
Password is "infected" without quotes
(272.07 KiB) Downloaded 79 times
(272.07 KiB) Downloaded 79 times
HOW TO DECRYPT FILES
File size: 29184 bytes
File type: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5: 92b2c03f09a07b6c12233c4c2132c710
SHA1: 20cba04751a7d1211c8dd07cd8ffb7d1c1737ff9
SHA256: c0603fcd04d8e2fe78559a1fc07d0d8e569c08225ecb864850edd9511b11a439
SHA512: d2da96165e89cf636577d534daf8ae455806a370bd09994890fa31d45b7c668a5a1e077f4823b8fc302afa77ec54ce18fafb7ffb5ee885f9285c464b26961dce
CRC32: 4CB559AE
Ssdeep: 384:IXoCyA9viXYGVC9EC+4q8KNNFNu3i7oZPz+SkOATjfnPD8Z0/dbpa:I2Ak3VCOsVWjI7+SdA3IOpa
Malwr: http://malwr.com/analysis/92b2c03f09a07 ... c2132c710/
VirusTotal: https://www.virustotal.com/file/c0603fc ... /analysis/
File size: 29184 bytes
File type: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5: 92b2c03f09a07b6c12233c4c2132c710
SHA1: 20cba04751a7d1211c8dd07cd8ffb7d1c1737ff9
SHA256: c0603fcd04d8e2fe78559a1fc07d0d8e569c08225ecb864850edd9511b11a439
SHA512: d2da96165e89cf636577d534daf8ae455806a370bd09994890fa31d45b7c668a5a1e077f4823b8fc302afa77ec54ce18fafb7ffb5ee885f9285c464b26961dce
CRC32: 4CB559AE
Ssdeep: 384:IXoCyA9viXYGVC9EC+4q8KNNFNu3i7oZPz+SkOATjfnPD8Z0/dbpa:I2Ak3VCOsVWjI7+SdA3IOpa
Malwr: http://malwr.com/analysis/92b2c03f09a07 ... c2132c710/
VirusTotal: https://www.virustotal.com/file/c0603fc ... /analysis/
Attachments
Password is "infected" without quotes
(106.6 KiB) Downloaded 64 times
(106.6 KiB) Downloaded 64 times
Belgian ransomware.
Attachments
(49.39 KiB) Downloaded 82 times
Ransomware
Attachments
Password is "infected" without quotes
(121.73 KiB) Downloaded 77 times
(121.73 KiB) Downloaded 77 times
hi
yes seen such ones over the last 2 weeks on infected machines.
yes seen such ones over the last 2 weeks on infected machines.
