Malware Download

[Weyne]

File: CD-1048789348230920000001000389690.zip [CD-1048789348230920000001000389690.cpl]
Download URL:

Code: [Select]

http://ge.tt/api/1/files/9twPgcg1/3/blob?download
http://w853034.blob4.ge.tt/streams/9twPgcg1/CD-1048789348230920000001000389690.zip?sig=-UXgcsP-ONOteX8mw-6IZdIpmnweyvznKwQ&type=download
VirusTotal Analysis:
https://www.virustotal.com/file/9e43a4df87557fef850abeb01ce74138441305e739759c9287f527d59c78eaaf/analysis/1399629324/

[Weyne]

File: Orcamento_13052014.zip [Orcamento_13052014.cpl]
Download URL:

Code: [Select]

http://ge.tt/api/1/files/5uLMtwg1/9/blob?download
http://w636047.blob4.ge.tt/streams/5uLMtwg1/Orcamento_13052014.zip?sig=-UXzjy8Vr9icsTRK0oGDoH9-_o6vWYI4b2I&type=download
VirusTotal Analysis:
https://www.virustotal.com/file/c534e4c7d4e8a5ebd9267b5d0ea4bca5e21a68539d85e2abae0ef023cef03ade/analysis/1399949952/

[Weyne]

File: 2a_Via_GVT_782689116_.zip [2a_via_Boleto.cpl]
Download URL:

Code: [Select]

http://vshleme.com/wp-content/themes/responsive/includes/images/img/Cod/?19156__19156__87326387427347387562365293487283472987592734827342847582342321915619156/
http://www.aliasparis.com/wp-includes/css/index.php
VirusTotal Analysis:
https://www.virustotal.com/file/9d98816476ebfb0ce1ac18dcda04e8d4eee587794f6fb26df94a8aa3f822b4bf/analysis/1400196536/

[Weyne]

Fake plugin update
File: setup.exe
Download URL:

Code: [Select]

http://globalreward-zone.honeybrain.eu/
http://downloads.updatersoft.com/get/click/crjjs383/
VirusTotal Analysis:
https://www.virustotal.com/file/f34e2c0598074e2d71bb34cb4228d6e806170d085cf6d1840c8836c7c075173d/analysis/1400568199/

[Weyne]

File: Comprovante
Download URL:

Code: [Select]

http://www1.usacce1.com.br/anexo.html
http://www1.usacce1.com.br/sudje9fj3rfprf/
VirusTotal Analysis:
https://www.virustotal.com/file/7287f377575aa0ce20f1557c027bf06ed961f39b03d8e35f7a8b990916fa1805/analysis/1400750174/

[Weyne]

File: httpwww.itau-30horas.com.br.zip [httpwww.itau-30horas.com.br.zip.cpl]
Download URL:

Code: [Select]

http://ge.tt/api/1/files/7JHP7kh1/0/blob?download
VirusTotal Analysis:
https://www.virustotal.com/file/6d12a62620f31e037a705cc60f4964397a60284ece4ddc6dd62c42b92fdcb2b0/analysis/1400879066/

[Weyne]

File: Correios.OnLine.zip [Correios.OnLine.cpl]
Download URL:

Code: [Select]

http://ge.tt/api/1/files/8sxOJvh1/0/blob
VirusTotal Analysis:
https://www.virustotal.com/file/69b06e1101050413bd7b88221a399f5f9b4fcfbaf0c299bd697c1d3965066bce/analysis/1401237960/

[Weyne]

File: Orcamento-Planilha-PDF.zip [Orcamento-Planilha-PDF .cpl]
Download URL:

Code: [Select]

http://fabulosagay.net/planilha/Orcamento.php
http://ge.tt/api/1/files/8MMnHBi1/0/blob
VirusTotal Analysis:
https://www.virustotal.com/file/98e2fe88afe390981d3e74ea2078e3cfb48d946f11b0ea56e8b0c814d652018b/analysis/1401406853/

[Weyne]

File: Minuta.Acordo-2001446547-.zip [Minuta-de-Acordo-30052012_PDF_.com]
Download URL:

Code: [Select]

http://pondokbali.com.au/components/com_newsfeeds/views/newsfeed/adobe.reader6.php
http://metrokota.bps.go.id//modules/mod_jevents_latest/tmpl/minuta.php
VirusTotal Analysis:
https://www.virustotal.com/file/d4e1bb2fb6eac404ef2415828856b8109a1d97bdfbce3127564585e6c5c7bdba/analysis/1401461345/

[Weyne]

File: Nota_Fiscal.zip [Nota_Fiscal.cpl]
Download URL:

Code: [Select]

http://www.pargosclub.com/wp-content/plugins/meteor-slides/languages/Nf/
http://epiccss.es/css/Nota_Fiscal.zip
VirusTotal Analysis:
https://www.virustotal.com/file/f72595772cd0be3abee3d423d65fc6c4ecefbf4f455e370af6ceefc434ab4455/analysis/1401760000/

[Weyne]

File: Comprovante1.zip [Comprovante.cpl]
Download URL:

Code: [Select]

http://bit.ly/1h2tt8f
http://1visualizacao.net/index.html
https://dl.dropboxusercontent.com/s/4idpp5rha2m2ez7/Comprovante1.zip
https://www.dropbox.com/meta_dl/eyJzdWJfcGF0aCI6ICIiLCAidGVzdF9saW5rIjogZmFsc2UsICJzZXJ2ZXIiOiAiZGwuZHJvcGJveHVzZXJjb250ZW50LmNvbSIsICJpdGVtX2lkIjogbnVsbCwgImlzX2RpciI6IGZhbHNlLCAidGtleSI6ICI0aWRwcDVyaGEybTJlejcifQ/AAJMK57_voDplCCKAG209g98Tn0BUoAn_onS4Jd5Fwx0VQ?dl=1
VirusTotal Analysis:
https://www.virustotal.com/file/df1b104849ef10f910648b70dd0b7d4384d44e3b666a180e959c97ecc99db826/analysis/1401859432/

[Weyne]

File: Ingressos_FIFA-2014.zip [Ingressos_FIFA-2014.exe]
Download URL:

Code: [Select]

http://www.veytmarc.be/images/stories//fruit/Ingressos_FIFA-2014.zip
VirusTotal Analysis:
https://www.virustotal.com/file/6ee4225e29d58b160945cf53d2d7f41fb9908bce8aef375dea6c66aa8eb1fb40/analysis/1401922414/

[Weyne]

File: Intimacao.zip [Intimacao.cpl]
Download URL:

Code: [Select]

http://bit.ly/1meJpjS
http://vervisualizacao.com/intimacao/
http://vervisualizacao.net/Intimacao.zip
VirusTotal Analysis:
https://www.virustotal.com/file/42ddf966c0f71d5e2c446f32e3a1e79fc45297738105033dc165454210c09c2c/analysis/1402023144/

[Weyne]

File: NotaFiscal.6794125.xml.cpl [NotaFiscal.6794125.xml.zip]
Download URL:

Code: [Select]

http://coopabe.com.ar/NF-e.Danfe.73598742158746587497.pdf.php
http://fredtravels.com/NotaFiscal.6794125.xml.zip
VirusTotal Analysis:
https://www.virustotal.com/file/f7ed2c92beb8a5464e4a0abd29dacd2f2de3cfc676792a5b6b72aae979743bf2/analysis/1402960920/

[Weyne]

File: NotaFiscal.98741254.xml.cpl [NotaFiscal.98741254.xml.zip]
Download URL:

Code: [Select]

http://coopabe.com.ar/NF-e.Danfe.73598742158746587497.pdf.php
http://galeriaseldorado.com/NotaFiscal.98741254.xml.zip
VirusTotal Analysis:
https://www.virustotal.com/file/37946aa3883df11a401b55ffc366e8820eed71e60f6b31148fae819055746e73/analysis/1403099506/