[rkhunter]

MDL wrote in Twitter that it discovered new Sinowal activity after some weeks of silence. Domain names are probably being generated again.

[Aleksandra]

http://www.virustotal.com/file-scan/rep ... 1325777651

[rkhunter]

There are Sinowal's more and more. Was caught over 15 droppers at last two days.

[Aleksandra]

There are Sinowal's more and more. Was caught over 15 droppers at last two days.

Please attach your samples.

[rkhunter]

There are Sinowal's more and more. Was caught over 15 droppers at last two days.

Please attach your samples.

[AaLl86]

Hi all!
First of all, I wish an happy new year to everyone here.
Second, and more important thing is this: http://www.aall86.altervista.org/files/ ... alysis.pdf
Take a glance of it, it's an analysis of last Sinowal I found, and tell me what do you think about...
Unfortunately I lost that damn payload in some VM I use for analysis. Let me know if someone has the exact payload of my analysis please...

Regards,
Andrea

[PX5]

http://www.threatexpert.com/reports.asp ... &x=12&y=13

:(

Ill see if I can find the originals I sent yall, not sure where I put them.

Cheers,

MJ

[rkhunter]

28 fresh samples

[rkhunter]

35 fresh samples

[Aleksandra]

MD5: 3e16d15c969ff2be96757b25ac981ea3
SHA1: 0652dbd14d4a8ab54031d50bfa64b833b6719715
9/42

MD5: 21e645cf1fb09ce41698280eae2e2ebd
SHA1: f75097f133652c076e5fc49f72493ea7d2aa6768
9/42