Help identify malware

Forum for analysis and discussion about malware.

Help identify malware

Postby puzzlex » Fri Aug 25, 2017 1:33 pm

Anyone recognizes?
You do not have the required permissions to view the files attached to this post.
puzzlex
 
Posts: 19
Joined: Tue Oct 20, 2015 12:22 pm
Reputation point: 2

Re: Help identify malware

Postby puzzlex » Fri Aug 25, 2017 2:40 pm

C&C 1 (not sure if there were more):

http://www.bella-bg.com/private/

Looks a nifty malware, shame they do not use SSL at this level.
puzzlex
 
Posts: 19
Joined: Tue Oct 20, 2015 12:22 pm
Reputation point: 2

Re: Help identify malware

Postby Antelox » Sun Aug 27, 2017 8:21 am

This is FormBook form grabber.

C&C:
Code: Select all
hxxp://www.bella-bg.com/private


BR,

Antelox
Antelox
 
Posts: 114
Joined: Sun Mar 21, 2010 10:38 pm
Reputation point: 91

Re: Help identify malware

Postby puzzlex » Sun Aug 27, 2017 10:12 pm

You rock! BIG THANK
puzzlex
 
Posts: 19
Joined: Tue Oct 20, 2015 12:22 pm
Reputation point: 2

Re: Help identify malware

Postby puzzlex » Tue Sep 12, 2017 9:53 am

Control Panel:
script.zip

It is not the full panel unfortunately, config.php missing :(
Got it from: http://www.olalimpopo.com/j0g2z5t/
You do not have the required permissions to view the files attached to this post.
puzzlex
 
Posts: 19
Joined: Tue Oct 20, 2015 12:22 pm
Reputation point: 2


Return to Malware

Who is online

Users browsing this forum: No registered users and 8 guests