Attachments
(353.05 KiB) Downloaded 63 times
markusg wrote:http://www.virustotal.com/file-scan/rep ... 1296143768what pass ?
A forum for reverse engineering, OS internals and malware analysis
loho wrote:Pass is "infected", with no quotes.markusg wrote:http://www.virustotal.com/file-scan/rep ... 1296143768what pass ?
Thanks,
--AD
dyfhiushduh.exe
http://www.virustotal.com/file-scan/rep ... 1296993188
http://www.virustotal.com/file-scan/rep ... 1296993188
Attachments
(197.55 KiB) Downloaded 54 times
Attachments
(161.03 KiB) Downloaded 65 times
markusg wrote:http://www.virustotal.com/file-scan/rep ... 1297012856SpyEye, post moved.
Ring0 - the source of inspiration
Attachments
(331.79 KiB) Downloaded 62 times
markusg wrote:http://www.virustotal.com/file-scan/rep ... 1297663793I have tested out that Safe Returner could detect it "syscheckrt.exe"
Attachments
One of the latest SpyEyes, looks like with Zeus embedded functionality. Password - virus.
Pretty active C&C (at the time of writing this post)
With ccgrabber update and various configurations
http://www.virustotal.com/file-scan/rep ... 1297515603
http://www.virustotal.com/file-scan/rep ... 1297226718
With ccgrabber update and various configurations
mansoitars.com/T6yRslk8JrR5sOpskHs51L/bin/program.exehttp://www.virustotal.com/file-scan/rep ... 1297957320
mansoitars.com/T6yRslk8JrR5sOpskHs51L/bin/signed.exe
mansoitars.com/T6yRslk8JrR5sOpskHs51L/bin/spy_upx_signed.exe
http://www.virustotal.com/file-scan/rep ... 1297515603
http://www.virustotal.com/file-scan/rep ... 1297226718
