Author Topic: daily something......  (Read 838402 times)

0 Members and 1 Guest are viewing this topic.

April 13, 2012, 06:38:26 am
Reply #1245

EP_X0FF

  • Guest
Payloads of BH EK 91.201.4.114

FakeAV
Quote
hxxp://91.201.4.114/files/0aecb
hxxp://91.201.4.114/files/01438
hxxp://91.201.4.114/files/c3f92

ZeroAccess
Quote
hxxp://91.201.4.114/files/bbea0

May 11, 2012, 11:22:46 am
Reply #1246

sursmurf

  • Special Access
  • Full Member

  • Offline
  • *

  • 68
FakeAV

VT [7/42]
https://www.virustotal.com/file/7f06cdf4659fce4d61702627326e4ea5431692c5982bf7408886bcf7d26d25c1/analysis/1336734836/

MD5:033af6a5044f50ea5878c4e9fbe8a4a5

Code: [Select]
hXXp://crashesscanningagent.info/68efd410a6a48b3c/2/download/
hXXp://taskscleanerinspection.info/68efd410a6a48b3c/2/setup.zip


May 17, 2012, 04:20:43 pm
Reply #1247

Xylitol

  • Special Members
  • Jr. Member

  • Offline
  • *

  • 24
Code: [Select]
ZeuS config hxxp://police-center.in/forum/config.bin
Citadel C&C http://stopwell.org/cp.php?m=login
SELECT * FROM `users` WHERE `login` = 'admin '#--' and `password`='d6d36367ad2384f71489707e6fff0879921b50f9';

July 16, 2012, 06:39:47 am
Reply #1248

Xylitol

  • Special Members
  • Jr. Member

  • Offline
  • *

  • 24
Pony c&c
Quote
hxxp://sam-latrilogie.com:8080/pony/admin.php
hxxp://194.146.227.48:8080/pony/admin.php
hxxp://etsiunjour.fr:81/pony/admin.php
SELECT * FROM `users` WHERE `login` = 'admin '#--' and `password`='d6d36367ad2384f71489707e6fff0879921b50f9';

July 23, 2012, 05:44:33 pm
Reply #1249

kurzpc

  • Newbie

  • Offline
  • *

  • 8
Code: [Select]
hxxp://www.thecoverversions.com/stats/bar/img/3.exe

October 19, 2012, 03:23:58 pm
Reply #1250

boston

  • Sr. Member

  • Offline
  • ****

  • 175
xttp://erfendirnand.net/adobe/update_flash_player.exe
xttp://corondorstrike.net/adobe/update_flash_player.exe
https://www.virustotal.com/file/dd8cc45e5a3b5689544a9af984576f51530c6a3019b2dc13199278ef7bccb613/analysis/1350659782/

October 19, 2012, 05:58:01 pm
Reply #1251

boston

  • Sr. Member

  • Offline
  • ****

  • 175

October 19, 2012, 09:36:20 pm
Reply #1252

boston

  • Sr. Member

  • Offline
  • ****

  • 175

October 20, 2012, 10:32:14 am
Reply #1253

boston

  • Sr. Member

  • Offline
  • ****

  • 175

December 22, 2012, 10:21:30 am
Reply #1254

Xylitol

  • Special Members
  • Jr. Member

  • Offline
  • *

  • 24
SELECT * FROM `users` WHERE `login` = 'admin '#--' and `password`='d6d36367ad2384f71489707e6fff0879921b50f9';


March 08, 2014, 07:11:56 am
Reply #1256

XiTri

  • Jr. Member

  • Offline
  • **

  • 24
something wrong
EXE name possible to change randomly
Code: [Select]
hxxp://dlc.fan-trafiks.ru/download2/67/Nys3NCImPWcmIH9jJyQlIml7ejA4Kjo/KHI/OywUTAUMCAEFCAQNRBkZQgkKBC4KHhhKBQMaREhdGBQaQra4sLG3tL%2BysK/s4uDo0eb0rAv5p5Q/mp4_4.exe

March 09, 2014, 01:11:03 pm
Reply #1257

XiTri

  • Jr. Member

  • Offline
  • **

  • 24
another shit

http://dlc.myheads.ru/download2/0f//+P//Or+5b/++Ke7/+zt6qGzsvjw0sLH0IrHw9TchM3EwMnNwNzVnMHBmtHSzObC1tCCzcui/PDloKyi+v7w//38/P/94ve0uriwib685APurUU/77777.exe

August 29, 2014, 08:50:35 am
Reply #1258

Xylitol

  • Special Members
  • Jr. Member

  • Offline
  • *

  • 24
ZeuS on TOR
Code: [Select]
hxtp://zxjfcvfvhqfqsrpz.onion/~ifybo/zeu5/r/ifybnow.exe
hxtp://zxjfcvfvhqfqsrpz.onion/~friend/bitedoelikesuarez_tk/cit/files/soft.exe
hxtp://zxjfcvfvhqfqsrpz.onion/~lemore/log-needed-asap_com/222/lemo.exe
hxtp://zxjfcvfvhqfqsrpz.onion/~mekzi/ali-pay_com/1/mekz1.exe
hxtp://zxjfcvfvhqfqsrpz.onion/~mekzi/log-bank_com/2/mekz2.exe
hxtp://zxjfcvfvhqfqsrpz.onion/~mekzi/manuchimso_com/3/mekz3.exe
hxtp://zxjfcvfvhqfqsrpz.onion/~mekzi/mekzi-logs_com/4/mekz4.exe
hxtp://zxjfcvfvhqfqsrpz.onion/~mekzi/oluwa-involved_com/5/mekz5.exe
hxtp://zxjfcvfvhqfqsrpz.onion/~mine/cloudns_org/1/myn1.exe
hxtp://zxjfcvfvhqfqsrpz.onion/~nelson/crome/1/bot.exe
hxtp://zxjfcvfvhqfqsrpz.onion/~new/paper-chasing-4lyf_com/2/new.exe
hxtp://zxjfcvfvhqfqsrpz.onion/~new/lmao/123/new2leo.exe
ip server is 46.149.111.10
SELECT * FROM `users` WHERE `login` = 'admin '#--' and `password`='d6d36367ad2384f71489707e6fff0879921b50f9';

October 08, 2014, 10:46:12 pm
Reply #1259

bobcrusader

  • Newbie

  • Offline
  • *

  • 2
Cryptolocker here: auspost-track24.net