Author Topic: 91.212.65.148  (Read 11005 times)

0 Members and 1 Guest are viewing this topic.

May 11, 2009, 10:25:57 am
Read 11005 times

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Ruining the bad guy's day

May 26, 2009, 09:06:58 am
Reply #1

CkreM

  • Special Access
  • Hero Member

  • Offline
  • *

  • 567
Exploit/trojan:
Code: [Select]
http://nuotoll.com/image/pfgt.phpwepawet gives error on this one but the PDF analyze work:
http://wepawet.iseclab.org/view.php?hash=7263485859f869eac110cf4178deea3c&type=js
leads to
Code: [Select]
http://nuotoll.com/image/qaze.phpwhich downloads in the end
Code: [Select]
http://nuotoll.com/image/install.exehttp://www.virustotal.com/analisis/12e04038d5392ff73ff8be1c78bba444f85ea3d2ec07ea3497629e93c8102d9e-1243327556

should start on
Code: [Select]
nuotoll.com/image/
Mal-Aware