[STRELiTZIA]

are the samples here corrupted?? : http://www.kernelmode.info/forum/viewto ... 140#p14897

Try like this:
316b61e1b06c08926b82fc19ff5b0119e4f08a264ded76b1eaedab024be4ef76.doc
password is: 0706

a0dea7b1e8caae760f0f664ac7b9187c66f93ac1c504f6e54564e594c6243618.xls
password is: 1933

dff871b5df358dd4e290a34e8f1a77e2cb45bb49d0e3b539eee48245fef2f043.xls
password is: 1959

[_69]

Has someone got this: http://www.securelist.com/en/descriptio ... AutoRun.jw

[tachion]

Has someone got this: http://www.securelist.com/en/descriptio ... AutoRun.jw

this is variant sality

[rough_spear]

Hi All, :)

Can I have following samples.The list of MD5 are given below.

SFX 7Z

86fc04550c2a6da0c5ca9a95c50a07e0
6fc04550c2a6da0c5ca9a95c50a07e0
51E0A8F002CCA32D85C14ACB59B2DEAA
E06A85659B970A71ED78FBFD5EF232FD
F0131569ED3502FA660A478CC9E9BE6D
98ADB93A92D72721760889C0FD1C9829
80B8ADD05B94F0A2B43824C12978E6FC
80B8ADD05B94F0A2B43824C12978E6FC
b35228d463d62f154661d99b22d14866

Wise Installer

5926C298509C9C6EA8BBF9AB6FBDDD41

SWF EXE

06694282704FCB9DBEC264A9145EAC87
6A0CA5E661B1041CEF042097FD55BF1E
5BA8FFA63612F45E6ADC68F7F63B76E1
9AB0C5319D51E8579C16B9D50E213732
FD85F067ECFBDACD28A1157A4983F503
FC8606FC53CAFDD915A98CED884B1BC4
1973C4A2FD6864F31C397DC9BE2023A2
DD310BD5B00526B2824F9FB86BAB1216
965defd393746ceaaf7de06412312092

Smart Install

503f9f10f551d697766a1e5ca451222c

Swc2Exe CWS

93C5F67467DFBED63F651E8A4ED9EEBB
8d1249c0c4fc27886c5a806a27e12422
8d1249c0c4fc27886c5a806a27e1b2d7

Thanks in advance.

Regarad,


rough_spear.

[Xylitol]

Hi All, :)

Can I have following samples.The list of MD5 are given below.

SFX 7Z

86fc04550c2a6da0c5ca9a95c50a07e0
6fc04550c2a6da0c5ca9a95c50a07e0
51E0A8F002CCA32D85C14ACB59B2DEAA
E06A85659B970A71ED78FBFD5EF232FD
F0131569ED3502FA660A478CC9E9BE6D
98ADB93A92D72721760889C0FD1C9829
80B8ADD05B94F0A2B43824C12978E6FC
80B8ADD05B94F0A2B43824C12978E6FC
b35228d463d62f154661d99b22d14866

Wise Installer

5926C298509C9C6EA8BBF9AB6FBDDD41

SWF EXE

06694282704FCB9DBEC264A9145EAC87
6A0CA5E661B1041CEF042097FD55BF1E
5BA8FFA63612F45E6ADC68F7F63B76E1
9AB0C5319D51E8579C16B9D50E213732
FD85F067ECFBDACD28A1157A4983F503
FC8606FC53CAFDD915A98CED884B1BC4
1973C4A2FD6864F31C397DC9BE2023A2
DD310BD5B00526B2824F9FB86BAB1216
965defd393746ceaaf7de06412312092

Smart Install

503f9f10f551d697766a1e5ca451222c

Swc2Exe CWS

93C5F67467DFBED63F651E8A4ED9EEBB
8d1249c0c4fc27886c5a806a27e12422
8d1249c0c4fc27886c5a806a27e1b2d7

Thanks in advance.

Regarad,


rough_spear.

some files are missing.

[Flamef]

I am looking for :
It's a Win32/Dofoil variant,Ransomware.
MD5:47F2B8FCC2873F4DFD573B0E8A77AAA9
Can you attach the UNPACKED version,as i have no idea how to unpack custom packed viruses?
Thanks in advance.

[mfox]

Looking for these samples:
https://www.virustotal.com/file/90c373c ... /analysis/
https://www.virustotal.com/file/ddeef41 ... /analysis/
https://www.virustotal.com/file/ad94f21 ... /analysis/

Thanks.

[hnpl2011]

I'm looking for:
Downloader.Dromedan
9c634f3a23f107b3419869dd0fd304d4
c2618a002853e9266a4a3a1f9e7cd957
68ba056383902942adadf1b80bd45e57

1d31ba6446658100c28909bb9e0c01d3
79ba3faeb0f6400aa88d047aee3eacf7
7c810cbb47c9f937b5f663b51ab7ee50
96f7c9d231bc5835e4a7c07bc94c5b4a

Trojan.Mdropper
a453e4c02cd88d4d366cf727f5c3c2bb
fa11f5939f69e8566a0136766122f89f
5819f879a2e411752124e2d08b3c57d9
97952865ff490e6527a1fc4276946f9a
21c0c353f9b0a8fe56645b50d7e0ef92
7b3208b1dc28b2d5f7641aa212e6aabf
e85c96bec3963ebf773bb5f9a185cf5c
eba37370d9366d71863a77a04031de62
78c3d73e2e2bba6d8811c5dc39edd600
Thank for your help :)

[Xylitol]

I am looking for :
It's a Win32/Dofoil variant,Ransomware.
MD5:47F2B8FCC2873F4DFD573B0E8A77AAA9
Can you attach the UNPACKED version,as i have no idea how to unpack custom packed viruses?
Thanks in advance.

Flamef.zip

infected
(40.23 KiB) Downloaded 55 times

(not unpack)

Looking for these samples:
https://www.virustotal.com/file/90c373c ... /analysis/
https://www.virustotal.com/file/ddeef41 ... /analysis/
https://www.virustotal.com/file/ad94f21 ... /analysis/

Thanks.

mfox.zip

infected
(243.87 KiB) Downloaded 61 times

I'm looking for:
Downloader.Dromedan
9c634f3a23f107b3419869dd0fd304d4
c2618a002853e9266a4a3a1f9e7cd957
68ba056383902942adadf1b80bd45e57

1d31ba6446658100c28909bb9e0c01d3
79ba3faeb0f6400aa88d047aee3eacf7
7c810cbb47c9f937b5f663b51ab7ee50
96f7c9d231bc5835e4a7c07bc94c5b4a

Trojan.Mdropper
a453e4c02cd88d4d366cf727f5c3c2bb
fa11f5939f69e8566a0136766122f89f
5819f879a2e411752124e2d08b3c57d9
97952865ff490e6527a1fc4276946f9a
21c0c353f9b0a8fe56645b50d7e0ef92
7b3208b1dc28b2d5f7641aa212e6aabf
e85c96bec3963ebf773bb5f9a185cf5c
eba37370d9366d71863a77a04031de62
78c3d73e2e2bba6d8811c5dc39edd600
Thank for your help :)

hnpl2011.zip

infected
(693.41 KiB) Downloaded 76 times

can't find 5819f879a2e411752124e2d08b3c57d9 and 1c0c353f9b0a8fe56645b50d7e0ef92 is invalid hash.

[_69]

Need 1 sample of this virus http://blogs.avg.com/news-threats/owls/