FAUTLReports

MMD-0033-2015 - Linux/XorDDoS case CNC:HOSTASA.ORG

2015-06-24

Author: unixfreaxjp

file_types:rar file_types:zip platforms:linux file_types:sh file_types:elf malware_types:botnet malware_types:downloader malware_types:virus malware_types:backdoor platforms:linux server

MMD-0032-2015 - The ELF ChinaZ "reloaded"

2015-06-20

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:elf malware_types:botnet file_types:so malware_types:virus file_types:c platforms:windows architecture:x64

Afghan Government Compromise: Browser Beware

2015-06-12

VOLEXITY

Author: Volexity

file_types:javascript

DGA botnet domains: malicious usage of pseudo random domains

2015-05-06

CERT.PL

Author: CERT Polska

malware_types:botnet source_tag:analysis source_tag:dns source_tag:dga

A New Shellshock Worm on the Loose

2015-04-09

VOLEXITY

Author: Volexity

file_types:txt file_types:bin file_types:sh malware_types:worm file_types:c

MMD-0031-2015 - What is NetWire (multi platform) RAT

2015-04-07

MalwareMustDie

Author: unixfreaxjp

file_types:dll platforms:linux malware_types:rat file_types:dat file_types:exe file_types:so malware_types:virus techniques:persistence file_types:cmd file_types:xml

iBanking is back in Poland

2015-01-16

CERT.PL

Author: CERT Polska

platforms:android source_tag:analysis source_tag:malware source_tag:e-banking

MMD-0030-2015 - New malware on Shellshock: Linux/ChinaZ

2015-01-14

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:pe file_types:exe file_types:sh file_types:elf file_types:bash malware_types:virus malware_types:backdoor architecture:x64 techniques:anti-debug

China/PRC origin Linux botnet's malware infection and its distribution scheme unleashed

2014-11-08

MalwareMustDie

Author: unixfreaxjp

platforms:linux architecture:arm architecture:mips file_types:sh file_types:elf malware_types:botnet file_types:so malware_types:rootkit malware_types:backdoor platforms:linux server

Drupal Vulnerability: Mass Scans & Targeted Exploitation

2014-10-16

VOLEXITY

Author: Volexity

file_types:php techniques:privilege escalation

MMD-0029-2014 - Warning of Linux/Mayhem attack in Shellshock

2014-10-07

MalwareMustDie

Author: unixfreaxjp

platforms:linux architecture:x86 file_types:bin file_types:elf malware_types:botnet file_types:so file_types:php malware_types:virus techniques:encryption architecture:x64

MMD-0028-2014 - Linux/XOR.DDoS

2014-09-29

MalwareMustDie

Author: unixfreaxjp

file_types:rar platforms:linux file_types:bin file_types:exe file_types:sh file_types:elf file_types:so malware_types:virus malware_types:backdoor techniques:decryptor

MMD-0027-2014 - Linux/Bashdoor(GafGyt) & Small ELF Backdoor at shellshock

2014-09-26

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:bin file_types:html file_types:sh file_types:elf file_types:php file_types:bash malware_types:virus malware_types:backdoor cve:cve-2014-6271

CVE-2014-6271 – Remotely Exploitable Vulnerability in Bash

2014-09-24

VOLEXITY

Author: Volexity

file_types:bash file_types:c cve:cve-2014-6271

MMD-0026-2014 - Linux/AES.DDoS: Router Malware

2014-09-13

MalwareMustDie

Author: unixfreaxjp

platforms:linux techniques:system calls architecture:arm architecture:mips file_types:html file_types:sh file_types:elf malware_types:backdoor architecture:x64 file_types:xml

APT-32 - The Vietnam Journalist Spy Campaign

2014-08-24

MalwareMustDie

Author: unixfreaxjp

file_types:dll architecture:x86 malware_types:loader file_types:so file_types:go platforms:windows file_types:img malware_types:dropper file_types:vb file_types:doc

Targeted attack of "Operation Torpedo"

2014-08-11

MalwareMustDie

Author: unixfreaxjp

file_types:html disassembler:die file_types:so file_types:go file_types:c file_types:javascript cve:cve-2013-1690

MMD-0025-2014 - Linux/.IptabLex or .IptabLes - China/PRC origin DDoS bot

2014-06-16

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:txt file_types:bin file_types:sh file_types:so file_types:php malware_types:trojan platforms:ubuntu platforms:centos techniques:privilege escalation

MMD-0024-2014 - Incident Report of Linux/Mayhem (LD_PRELOAD libworker.so)

2014-06-11

MalwareMustDie

Author: unixfreaxjp

platforms:linux architecture:x86 file_types:html file_types:sh file_types:elf file_types:so file_types:php file_types:bash file_types:c architecture:x64

DDoS in a Bruter Service - A camouflage of Stresser/Booter

2014-06-09

MalwareMustDie

Author: unixfreaxjp

malware_types:botnet file_types:so file_types:php file_types:c platforms:android

Malware Analysis Reports