A forum for reverse engineering, OS internals and malware analysis 

Win32/Sinowal (alias Mebroot)

Forum for analysis and discussion about malware.

Re: Sinowal--Mebroot

 #12371  by a_d_13
 Tue Mar 27, 2012 10:50 pm
Hello,

Thank you for the notification - I have doubled the board attachment size now. Attached is your posted file.

Thanks,
--AD
Attachments
(4.17 MiB) Downloaded 76 times

Re: Sinowal--Mebroot

 #12382  by Kafeine
 Wed Mar 28, 2012 7:59 pm
59 items from naretkolas.in as domain (2012-03-28) for the Sinowal BHEK.
I plan to stop posting this (kind of Danaids feeling...) except if told it's of some use by someone.
Attachments
Pass: infected - Sinowal BH EK items (include non PE files)
(4.42 MiB) Downloaded 83 times

Re: Sinowal--Mebroot

 #12407  by rkhunter
 Fri Mar 30, 2012 11:19 am
Kafeine wrote:59 items from naretkolas.in as domain (2012-03-28) for the Sinowal BHEK.
I plan to stop posting this (kind of Danaids feeling...) except if told it's of some use by someone.
It's useful at least for me.

Re: Sinowal--Mebroot

 #12409  by EP_X0FF
 Fri Mar 30, 2012 1:13 pm
Kafeine wrote:59 items from naretkolas.in as domain (2012-03-28) for the Sinowal BHEK.
I plan to stop posting this (kind of Danaids feeling...) except if told it's of some use by someone.
We appreciate your sharing. Even if your messages are not getting replies, it does not mean that they are not interesting to anyone.

Re: Sinowal--Mebroot

 #12414  by Kafeine
 Fri Mar 30, 2012 8:46 pm
Ok guys. Let's fill the leaking tub.
So 68 items from tabledown.com
Attachments
Pass: infected 68 Sinowal related items.
(4.77 MiB) Downloaded 81 times

Re: Sinowal--Mebroot

 #12507  by ResearchMalware
 Tue Apr 03, 2012 7:15 pm
Kafeine wrote:59 items from naretkolas.in as domain (2012-03-28) for the Sinowal BHEK.
I plan to stop posting this (kind of Danaids feeling...) except if told it's of some use by someone.
Very useful to enthusiastic learners. Thank you.
  • 1
  • 3
  • 4
  • 5
  • 6
  • 7
  • 12
 Return to “Malware”