A forum for reverse engineering, OS internals and malware analysis 

Win32/KanKan

Forum for analysis and discussion about malware.

Win32/KanKan

 #21164  by Xylitol
 Sat Oct 12, 2013 10:24 am
http://www.welivesecurity.com/2013/10/1 ... ese-drama/
Everything in attach except 4F29B2A9778C02F6FDB63F9041DC4D2F4668B484 (Updater)

Dropper:
a0a831462bdd7e4d5db9bf9b3875e864
5853c9bc1c3f9c2aa4b9daabcae86155
10d3d0f2e6553b17b30598e5cbf38ac0
Office plugin:
ebf07aa43bc810629c2ea68fd84c1117
6e6e69e385e2b18f7e5a34385e3e465a
753019a17a57018dfc9d2965acc82cf9
Updater:
6f3a12499553266103796f1e8cc2fb37
Service:
b18bc205058b06387b9de6ede0610e6d
a95f467b05f590b73647dbe705d14fd8
Android Applications:
860d2ef0dab9b1659f857860d68e20a3
fc6e3896e393fbaa246e284a1f993da6
6b87822ae927eab3c018430c02318d26
d7c7d877bbdfee4679cb9cfc0f90b2b9
Attachments
infected
(9 MiB) Downloaded 60 times
infected
(461.97 KiB) Downloaded 59 times
infected
(148.75 KiB) Downloaded 58 times
infected
(478.47 KiB) Downloaded 57 times
infected
(1.26 MiB) Downloaded 63 times
 Return to “Malware”