ikolor wrote:what is this .!!Something in encoded representation. One could say more precisely if you give a downloader which downloads & runs this file.
https://www.virustotal.com/en/file/90e6 ... 475579742/
A forum for reverse engineering, OS internals and malware analysis
Coding this malware is because ??? any answer.
https://www.virustotal.com/en/file/7b2f ... 475663403/
https://www.virustotal.com/en/file/7b2f ... 475663403/
Attachments
(177.58 KiB) Downloaded 73 times
Attachments
(143.54 KiB) Downloaded 68 times
ikolor wrote:next..locky
https://www.virustotal.com/en/file/dfa1 ... 475940307/
Attachments
password:infected
(222.63 KiB) Downloaded 70 times
(222.63 KiB) Downloaded 70 times
@xorsthingsv2
Attachments
(108.88 KiB) Downloaded 65 times
Encoded Locky ransomware...
BR,
Antelox
BR,
Antelox
ikolor wrote:thanks ..
https://www.virustotal.com/en/file/1396 ... 476186034/
LockyDump - All Your Configs Are Belong To Us ~ http://blog.talosintel.com/2016/10/lockydump.html
https://github.com/vrtadmin/Locky
https://github.com/vrtadmin/Locky
ikolor wrote:what is this .!!It is encoded Locky as here http://www.kernelmode.info/forum/viewto ... 885#p28885
https://www.virustotal.com/en/file/90e6 ... 475579742/
Posts moved,
Ring0 - the source of inspiration
Attachments
(137.47 KiB) Downloaded 70 times
ikolor wrote:next ..Locky (old version , it uses the .zepto extension)
https://www.virustotal.com/en/file/7fc3 ... 477077197/
Attachments
password:infected
(189.98 KiB) Downloaded 68 times
(189.98 KiB) Downloaded 68 times
@xorsthingsv2