Author Topic: TDL4, TDSS  (Read 7734 times)

0 Members and 1 Guest are viewing this topic.

October 06, 2011, 12:33:17 pm
Read 7734 times

EP_X0FF

  • Guest
TDL4 (0.03)

Quote
hxxp://95.168.172.225/1.exe

VT

http://www.virustotal.com/file-scan/report.html?id=00e9af76021d54fd7de17d893982232882b2e2f50b8a79dc179a6931e05cf259-1317901370

Quote
[main]
version=0.03
aid=66671
sid=0
builddate=351
installdate=6.10.2011 12:31:29
rnd=1945549517
[inject]
*=cmd.dll
* (x64)=cmd64.dll
[cmd]
srv=hxxps://lo4undreyk.com/;hxxps://sh01cilewk.com/;hxxps://cap01tchaa.com/;hxxps://kur1k0nona.com/;hxxps://u101mnay2k.com/
wsrv=hxxp://gnarenyawr.com/;hxxp://rinderwayr.com/;hxxp://jukdoout0.com/;hxxp://swltcho0.com/;hxxp://ranmjyuke.com/
psrv=hxxp://crj71ki813ck.com/
version=0.31

October 26, 2011, 04:27:32 pm
Reply #1

WIEx

  • Jr. Member

  • Offline
  • **

  • 34
    • Security
reupload sample please for anilysis

October 29, 2011, 12:44:06 pm
Reply #2

EP_X0FF

  • Guest
TDL4

Quote
hxxp://moddersondazone.com/random/trol.exe

Code: [Select]
[main]
version=0.03
aid=30392
sid=0
builddate=351
installdate=27.10.2011 11:21:24
rnd=1564855640
[inject]
*=cmd.dll
* (x64)=cmd64.dll
[cmd]
srv=hxxps://lo4undreyk.com/;hxxps://sh01cilewk.com/;
hxxps://cap01tchaa.com/;hxxps://kur1k0nona.com/;hxxps://u101mnay2k.com/
wsrv=hxxp://gnarenyawr.com/;hxxp://rinderwayr.com/;
hxxp://jukdoout0.com/;hxxp://swltcho0.com/;hxxp://ranmjyuke.com/
psrv=hxxp://crj71ki813ck.com/
version=0.31

http://www.virustotal.com/file-scan/report.html?id=6b6bcf6af3112d014ee37dc28422456ced76a038d4e1e63c8a7782495c8f926f-1317817325

October 30, 2011, 06:19:51 am
Reply #3

WIEx

  • Jr. Member

  • Offline
  • **

  • 34
    • Security
thank you!

November 19, 2011, 01:13:30 pm
Reply #4

steward

  • Newbie

  • Offline
  • *

  • 4
Could u please upload the file.

Thx

November 19, 2011, 01:19:49 pm
Reply #5

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Ruining the bad guy's day

November 19, 2011, 01:29:30 pm
Reply #6

steward

  • Newbie

  • Offline
  • *

  • 4
So sorry.

At least a link plz.