A forum for reverse engineering, OS internals and malware analysis 

Popureb rootkit

Forum for analysis and discussion about malware.

Re: Popureb rootkit

 #14807  by Xylitol
 Sun Jul 22, 2012 10:04 am
dumb110 wrote:https://www.virustotal.com/file/90cde9a ... 342946550/

anybody has this one??

I am not at my place..currently..so i cant get it..

thanks!
Attachments
infected
(10.62 KiB) Downloaded 84 times

Re: Popureb rootkit

 #16463  by cjbi
 Mon Nov 05, 2012 11:33 pm
Fresh Popureb bootkit dropper.
Obvious Korean targeted malware is obvious.

hxxp://126.15.181.20/8080/stup.exe

VirusTotal result(s)
Dropper VT 32/44 https://www.virustotal.com/file/86d2682cd6e5e636d6e9ecab0543cb8e2b4960879ea8444b3017da7a29cb5922/analysis/1352157036/
Driver VT 28/43 https://www.virustotal.com/file/7d8fdc080a7cb44992ee8bc59d41dba9c831343a6d14fd0a794191e0c9388b0f/analysis/1352158193/
Attachments
pass: infected
(57.55 KiB) Downloaded 91 times
 Return to “Malware”