FAUTLReports

MMD-0048-2016 - DDOS.TF = ELF & Win32 DDoS service with ASP + PHP/MySQL MOF webshells

2016-01-05

Author: unixfreaxjp

file_types:dll platforms:linux debugger:gdb file_types:html disassembler:objdump file_types:elf file_types:php malware_types:virus platforms:linux server malware_families:dridex

MMD-0047-2015 - SSHV: SSH bruter Linux botnet w/hidden process rootkit

2015-12-24

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:elf malware_types:botnet file_types:so malware_types:worm malware_types:rootkit file_types:php file_types:bash malware_types:virus malware_types:backdoor

MMD-0046-2015 - Kelihos 10 nodes C2 / CNC on NJIIX (US) and its actor(Severa)

2015-12-21

MalwareMustDie

Author: unixfreaxjp

file_types:pe file_types:html malware_types:botnet file_types:so file_types:go file_types:c file_types:javascript file_types:js techniques:encryption

Monitoring Process Creation via the Kernel (Part III)

2015-12-13

Objective-See

file_types:so file_types:go platforms:ios

MMD-0045-2015 - Linux/KDefend: a new China origin Linux threat w/disclaimer

2015-12-04

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:elf malware_types:botnet file_types:so file_types:go malware_types:downloader malware_types:backdoor malware_types:trojan platforms:linux server file_types:cpp

MMD-0044-2015 - Code disclosure of SkiDDoS threat

2015-11-23

MalwareMustDie

Author: unixfreaxjp

file_types:rar file_types:html file_types:elf malware_types:botnet file_types:go malware_types:virus file_types:c file_types:7z

Monitoring Process Creation via the Kernel (Part II)

2015-11-22

Objective-See

file_types:so file_types:go

Talking to Dridex (part 0) – inside the dropper

2015-11-10

CERT.PL

Author: CERT Polska

malware_families:dridex malware_types:dropper techniques:sandbox file_types:doc source_tag:analysis source_tag:malware

Virtual Private Keylogging: Cisco Web VPNs Leveraged for Access and Persistence

2015-10-07

VOLEXITY

Author: Volexity

techniques:persistence file_types:javascript

GMBot: Android poor man’s “webinjects”

2015-10-02

CERT.PL

Author: Łukasz Siewierski

malware_types:trojan platforms:windows platforms:android source_tag:analysis source_tag:e-banking source_tag:app overlay source_tag:gmbot

MMD-0043-2015 - Linux/Xor.DDOS Polymorphic feature

2015-09-18

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:txt file_types:bin file_types:pe file_types:html file_types:elf file_types:so file_types:go malware_types:virus malware_types:backdoor

MMD-0042-2015 - Geting to Linux/Mr.Black actor via Zegost

2015-09-06

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:pe file_types:exe architecture:mips file_types:sh file_types:elf malware_types:botnet file_types:bash malware_types:backdoor malware_types:dropper

MMD-0041-2015 - PE Mail-grabber Spambot & its C99 WebShell

2015-09-03

MalwareMustDie

Author: unixfreaxjp

file_types:rar file_types:dll file_types:pe file_types:exe file_types:so file_types:php platforms:windows

MMD-0040-2015 - VBE Obfuscation & AutoIt Banco Trojan

2015-08-29

MalwareMustDie

Author: unixfreaxjp

file_types:dll file_types:zip file_types:bin file_types:python file_types:php malware_types:virus file_types:java architecture:x64 cloud_environments:vmware file_types:vb

Smoke Loader poses as an Office plugin

2015-08-27

CERT.PL

Author: Łukasz Siewierski

malware_types:loader source_tag:analysis source_tag:malware source_tag:smoke

MMD-0039-2015 - ChinaZ Linux/BillGates.Lite Edition

2015-08-22

MalwareMustDie

Author: unixfreaxjp

platforms:linux architecture:x86 file_types:bin file_types:dat malware_types:botnet file_types:so file_types:go platforms:windows file_types:cpp malware_types:dropper

MMD-0038-2015 - ChinaZ's Ddos123.xyz

2015-08-11

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:elf file_types:so malware_types:virus file_types:c malware_types:backdoor

MMD-0037-2015 - Shellshock & Linux/XOR.DDoS C2

2015-07-16

MalwareMustDie

Author: unixfreaxjp

file_types:rar platforms:linux file_types:txt file_types:bin malware_types:botnet file_types:so malware_types:rootkit file_types:go malware_types:downloader platforms:windows

APT Group Wekby Leveraging Adobe Flash Exploit (CVE-2015-5119)

2015-07-08

VOLEXITY

Author: Volexity

techniques:phishing cve:cve-2015-5119

MMD-0036-2015 - KINS (ZeusVM)v2.0.0. builder & panel leaks

2015-07-05

MalwareMustDie

Author: unixfreaxjp

techniques:code injection malware_types:botnet file_types:so file_types:go file_types:php malware_types:virus techniques:encryption malware_families:zeus

Malware Analysis Reports