TDL4, TDSS

[EP_X0FF]

TDL4 (0.03)

hxxp://95.168.172.225/1.exe

VT

http://www.virustotal.com/file-scan/report.html?id=00e9af76021d54fd7de17d893982232882b2e2f50b8a79dc179a6931e05cf259-1317901370

[main]
version=0.03
aid=66671
sid=0
builddate=351
installdate=6.10.2011 12:31:29
rnd=1945549517
[inject]
*=cmd.dll
* (x64)=cmd64.dll
[cmd]
srv=hxxps://lo4undreyk.com/;hxxps://sh01cilewk.com/;hxxps://cap01tchaa.com/;hxxps://kur1k0nona.com/;hxxps://u101mnay2k.com/
wsrv=hxxp://gnarenyawr.com/;hxxp://rinderwayr.com/;hxxp://jukdoout0.com/;hxxp://swltcho0.com/;hxxp://ranmjyuke.com/
psrv=hxxp://crj71ki813ck.com/
version=0.31

[WIEx]

reupload sample please for anilysis

[EP_X0FF]

TDL4

hxxp://moddersondazone.com/random/trol.exe

Code: [Select]

[main]
version=0.03
aid=30392
sid=0
builddate=351
installdate=27.10.2011 11:21:24
rnd=1564855640
[inject]
*=cmd.dll
* (x64)=cmd64.dll
[cmd]
srv=hxxps://lo4undreyk.com/;hxxps://sh01cilewk.com/;
hxxps://cap01tchaa.com/;hxxps://kur1k0nona.com/;hxxps://u101mnay2k.com/
wsrv=hxxp://gnarenyawr.com/;hxxp://rinderwayr.com/;
hxxp://jukdoout0.com/;hxxp://swltcho0.com/;hxxp://ranmjyuke.com/
psrv=hxxp://crj71ki813ck.com/
version=0.31
http://www.virustotal.com/file-scan/report.html?id=6b6bcf6af3112d014ee37dc28422456ced76a038d4e1e63c8a7782495c8f926f-1317817325

[WIEx]

thank you!

[steward]

Could u please upload the file.

Thx

[SysAdMini]

Could u please upload the file.

Thx

Uploading samples to MDL is forbidden.

http://www.malwaredomainlist.com/forums/index.php?topic=2635.0

[steward]

So sorry.

At least a link plz.