@up
You have unlock code?
You have unlock code?
Waves97 wrote:@upI don't have unlock code.
You have unlock code?
A forum for reverse engineering, OS internals and malware analysis
Attachments
pass: malware
(13.58 KiB) Downloaded 60 times
(13.58 KiB) Downloaded 60 times
GMax wrote:This through me off for a while. But what you attached includes a Jadtre rootkit.ReviewsAntivirus wrote: MD5: 2EB70294D9A0E8BC6946995786D12423is droper
unpacked in atache
It is extremely similar if not identical to what is attached here: http://www.kernelmode.info/forum/viewto ... =10#p14914
https://www.virustotal.com/file/51da8ce ... /analysis/
Thread split
Ring0 - the source of inspiration
Epubb winlock
http://www.virustotal.com/file/0cdb305b ... /analysis/
http://www.virustotal.com/file/0cdb305b ... /analysis/
Attachments
infected
(35.46 KiB) Downloaded 74 times
(35.46 KiB) Downloaded 74 times
Split.
French ransom moved to French Ransom (Trojan:Win32/Ransom.FL)
German ransom moved to German Ransom (GEMA, GVU, InetAccelerator)
...
FakePolice ransoms common thread Trojan Ransom / FakePoliceAlert
AutoIt Ransomware Trojan:AutoIt/LockScreen
Reveton Trojan:Win32/Reveton
Tobfy and clones Trojan:Win32/Tobfy
Weelsof Trojan:Win32/Weelsof
Urausy Trojan:Win32/Urausy (aka "WinLocker")
LokoMoTo Trojan Ransom / WindowsSecurity / LokoMoTo
Pliqpay_monexy Trojan Ransom / Pliqpay_monexy
MBRlock Trojan.MBRlock
Lock Em All Trojan.Winlock - Lock Em All
WinAD Trojan WinAD (alias Ransom.ER, Winlock, Win32.Timer)
ACCDFISA Ransomware ACCDFISA
Xorist Ransom Xorist
Pornoblocker Trojan.Winlock - Pornoblocker
Ransom.BY Trojan:Win32/Ransom.BY
This thread now archived.
French ransom moved to French Ransom (Trojan:Win32/Ransom.FL)
German ransom moved to German Ransom (GEMA, GVU, InetAccelerator)
...
FakePolice ransoms common thread Trojan Ransom / FakePoliceAlert
AutoIt Ransomware Trojan:AutoIt/LockScreen
Reveton Trojan:Win32/Reveton
Tobfy and clones Trojan:Win32/Tobfy
Weelsof Trojan:Win32/Weelsof
Urausy Trojan:Win32/Urausy (aka "WinLocker")
LokoMoTo Trojan Ransom / WindowsSecurity / LokoMoTo
Pliqpay_monexy Trojan Ransom / Pliqpay_monexy
MBRlock Trojan.MBRlock
Lock Em All Trojan.Winlock - Lock Em All
WinAD Trojan WinAD (alias Ransom.ER, Winlock, Win32.Timer)
ACCDFISA Ransomware ACCDFISA
Xorist Ransom Xorist
Pornoblocker Trojan.Winlock - Pornoblocker
Ransom.BY Trojan:Win32/Ransom.BY
This thread now archived.
Ring0 - the source of inspiration