[Horgh]

Trojan:Win32/Urausy.E

[Mosh]

Another Urausy sample from 103.31.186.29 (Hong Kong)

SHA256: 0b043906e7baf5fa0cf49bfeb77ee299d8cb943330ecea84a950ab599a5efbc8
SHA1: 813812f2a4ff75a01042501abbdbcfcabeadf76f
MD5: 9c9c2e09acc22562adfee371fab29b8f
File size: 85.0 KB ( 87040 bytes )
File name: FlashPlayer_11_7_update_for_Win.exe
File type: Win32 EXE
VT: 3/46 https://www.virustotal.com/en/file/0b04 ... 377882332/

[Cody Johnston]

SHA256: 73b193c3e8f1fe3fe7473e78d6590d087db773ce210bf118f6e1c0cd49bd44c2
SHA1: e760088da5f1ebd3af8b0b45657f7a60902ec71b
MD5: 2308f7f081f5dccd664b2d95cac2208a
File size: 100.0 KB ( 102400 bytes )
File name: 9364419845799121817543.exe
Detection ratio: 6 / 47

https://www.virustotal.com/en/file/73b1 ... /analysis/

SHA256: 5cba4171f45cb57b0a1aa18fec8a0520efc60ffcd7ae56127c65a904afe349ed
SHA1: ba071063c0ba042d832d8531e43905c88bade3c3
MD5: e21caf76f4eef857d4d3aecde502443d
File size: 148.6 KB ( 152169 bytes )
File name: dxffddbhvltdfyckowd.bfg
File type: Win32 DLL
Detection ratio: 4 / 47

https://www.virustotal.com/en/file/5cba ... 378415046/

[Win32:Virut]

New icon.

[Win32:Virut]

They're back to the old icon.

Code: Select all

hxxp://tesyakoged.flnet.org/maindirectory/get.php?name=Cult_Movie.mpeg

[Win32:Virut]

SHA256: ff31bb3bf1501c78749afd559ce2ff85fe95b95e0ebdd182268e78e587670308
SHA1: b8c63dc2a5cb3660348f85c55d5889a8cdbf3f07
MD5: ac1f5b43282cda1d902341b2e34a62e0
File size: 169.0 KB ( 173056 bytes )
File name: install_adobeflashplayer.exe
File type: Win32 EXE
Detection ratio: 2 / 48
Analysis date: 2013-09-27 06:04:19 UTC ( 0 minutes ago )
https://www.virustotal.com/en/file/ff31 ... 380261859/

[forty-six]

[url]hxxp://defrr.concretestakepullers.com:90/index.html?p=5125&e=14"[/url]

[Win32:Virut]

[url]hxxp://defrr.concretestakepullers.com:90/index.html?p=5125&e=14"[/url]

Urausy, not Reveton.

[Win32:Virut]

Code: Select all

hxxp://seffve.stick-on-readers.org:90/index.html?p=5300

[Win32:Virut]

326 samples