Jump to content


Photo

New sample like yesterday (New blackhole...)


  • This topic is locked This topic is locked
1 reply to this topic

#1 samson39

samson39

    New Member

  • Members
  • Pip
  • 19 posts

Posted 14 April 2012 - 03:21 AM

(same infected server) Now with payload (wepawet has decoded the pdf):

https://www.virustot...sis/1334391092/

The PDF:

https://www.virustot...sis/1334391518/

(some)

The jar

https://www.virustot...sis/1334391599/

(some)


The html file

https://www.virustot...sis/1334391306/

Still nothing ...

Attached Files

  • Attached File  test.zip   236.11KB   15 downloads


#2 S!Ri

S!Ri

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 8,727 posts
  • Gender:Male

Posted 14 April 2012 - 07:01 AM

Hello.
Attached file will be verified
Thank you for your help.
Posted ImageS!Ri
Research Engineer

Posted Image Posted Image

Follow us: Twitter, Become a fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users