markusg wrote:3358d262-160d5c93PWS Zbot
MD5 : ca1f26cd94ec1b34dfac7a5c96759f15
https://www.virustotal.com/file-scan/re ... 1322143069
Posts moved.
Ring0 - the source of inspiration
Posts moved.
A forum for reverse engineering, OS internals and malware analysis
Posts moved.
AcroFF0.dll
MD5 : 8a11bc733e59027f4ecac2443f95ef94
http://www.virustotal.com/file-scan/rep ... 1324050175
AcroFF059.dll
MD5 : b1b919578de0c06a6fd558a85d727405
http://www.virustotal.com/file-scan/rep ... 1324050248
AcroFF0590.dll
MD5 : 8fa0b6d1dfbf2e651f35b33e273c243b
https://www.virustotal.com/file-scan/re ... 1324050626
there are more dlls will not upload all
appconf32.exe
http://www.virustotal.com/file-scan/rep ... 1324050925
MD5 : e0d9b3942fb0d910d95d4c1a2ab5d73d
MD5 : 8a11bc733e59027f4ecac2443f95ef94
http://www.virustotal.com/file-scan/rep ... 1324050175
AcroFF059.dll
MD5 : b1b919578de0c06a6fd558a85d727405
http://www.virustotal.com/file-scan/rep ... 1324050248
AcroFF0590.dll
MD5 : 8fa0b6d1dfbf2e651f35b33e273c243b
https://www.virustotal.com/file-scan/re ... 1324050626
there are more dlls will not upload all
appconf32.exe
http://www.virustotal.com/file-scan/rep ... 1324050925
MD5 : e0d9b3942fb0d910d95d4c1a2ab5d73d
Attachments
(1.31 MiB) Downloaded 82 times
Attachments
pass:malware
(115.77 KiB) Downloaded 69 times
(115.77 KiB) Downloaded 69 times
Attachments
pass:malware
(83.37 KiB) Downloaded 69 times
(83.37 KiB) Downloaded 69 times
Told that Zeus spreads via new phishing scheme. http://www.fbi.gov/news/stories/2012/ja ... are_010612
Attachments
pass: infected
(146.44 KiB) Downloaded 70 times
(146.44 KiB) Downloaded 70 times
Attachments
pass:infected
(189.13 KiB) Downloaded 65 times
(189.13 KiB) Downloaded 65 times
Win32.Zbot
SHA256: 5561d7d47841790264b180a647eaa69919bf9f0d0d65a4b2984b8285dd74192a
Detection ratio: 11 / 43
https://www.virustotal.com/file/5561d7d ... 327070845/
:D
SHA256: 5561d7d47841790264b180a647eaa69919bf9f0d0d65a4b2984b8285dd74192a
Detection ratio: 11 / 43
https://www.virustotal.com/file/5561d7d ... 327070845/
:D
Attachments
pass = infected
(185.76 KiB) Downloaded 70 times
(185.76 KiB) Downloaded 70 times
34 samples
Attachments
pass:infected
(2.19 MiB) Downloaded 87 times
(2.19 MiB) Downloaded 87 times
pass:infected
(4.59 MiB) Downloaded 75 times
(4.59 MiB) Downloaded 75 times
41 samples
Attachments
pass:infected
(4.81 MiB) Downloaded 90 times
(4.81 MiB) Downloaded 90 times
infected
(4.8 MiB) Downloaded 97 times
(4.8 MiB) Downloaded 97 times