FAUTLReports

MMD-0024-2014 - Incident Report of Linux/Mayhem (LD_PRELOAD libworker.so)

2014-06-11

Author: unixfreaxjp

platforms:linux architecture:x86 file_types:html file_types:sh file_types:elf file_types:so file_types:php file_types:bash file_types:c architecture:x64

DDoS in a Bruter Service - A camouflage of Stresser/Booter

2014-06-09

MalwareMustDie

Author: unixfreaxjp

malware_types:botnet file_types:so file_types:php file_types:c platforms:android

A journey to abused FTP sites (story of: Shells, Malware, Bots, DDoS & Spam) - Part 2

2014-06-02

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:pe file_types:sh file_types:elf file_types:so file_types:php malware_types:virus malware_types:backdoor platforms:windows file_types:vb

A journey to abused FTP sites (story of: Shells, Malware, Bots, DDoS & Spam) - Part 1

2014-05-31

MalwareMustDie

Author: unixfreaxjp

file_types:rar file_types:txt file_types:pe file_types:exe malware_types:loader file_types:html file_types:elf file_types:so file_types:php architecture:x64

MMD-0023-2014 - Linux/pscan & Linux/sshscan: SSH bruter malware

2014-05-23

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:txt file_types:bin file_types:elf file_types:so file_types:bash file_types:c

MMD-0022-2014 - Zendran, multi-arch Linux/Llightaidra - Part 1: background, installation, reversing & C2 access

2014-05-18

MalwareMustDie

Author: unixfreaxjp

platforms:linux architecture:x86 file_types:bin architecture:arm architecture:x86_64 file_types:sh malware_types:botnet malware_types:worm malware_types:trojan platforms:arch linux

MMD-0021-2014 - Linux/Elknot: China's origin ELF DDoS+backdoor

2014-05-13

MalwareMustDie

Author: unixfreaxjp

platforms:linux techniques:system calls file_types:exe file_types:html file_types:elf file_types:so malware_types:virus malware_types:backdoor techniques:encryption file_types:cpp

MMD-0020-2014 - Analysis of Linux/Mayhem infection: A shared libs ELF

2014-05-08

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:txt file_types:bin malware_types:loader architecture:x86_64 file_types:sh malware_types:botnet file_types:php malware_types:trojan malware_types:dropper

MMD-0019-2014 - "Xakep.biz" evil tools

2014-04-09

MalwareMustDie

Author: unixfreaxjp

malware_types:botnet file_types:so file_types:go file_types:php malware_types:crypter malware_types:spam bot

MMD-0018-2014 - Analysis note: "Upatre" is back to SSL?

2014-04-03

MalwareMustDie

Author: unixfreaxjp

file_types:dll file_types:zip techniques:honeypot file_types:so malware_types:rootkit file_types:go malware_types:downloader malware_types:trojan platforms:windows file_types:scr

MMD-0017-2014 - A post to sting Zeus P2P/Gameover

2014-03-23

MalwareMustDie

Author: unixfreaxjp

techniques:honeypot malware_types:botnet file_types:so malware_types:rootkit malware_types:virus malware_families:zeus

Case Study: How legitimate internet services like Amazon AWS, DropBox, Google Project/Code & ShortURL got abused to infect malware

2014-02-24

MalwareMustDie

Author: unixfreaxjp

file_types:zip file_types:exe file_types:html file_types:so malware_types:downloader file_types:php file_types:javascript malware_types:trojan cloud_environments:aws file_types:iso

AVTOKYO 2013.5 - Threats of Kelihos, CookieBomb, RedKit's and its Bad Actor

2014-02-18

MalwareMustDie

Author: unixfreaxjp

techniques:phishing techniques:code injection malware_types:botnet

MMD-0016-2014 - The JackPOS Behind the Screen

2014-02-13

MalwareMustDie

Author: unixfreaxjp

file_types:bin disassembler:die file_types:so file_types:go malware_types:virus file_types:c techniques:persistence

MMD-0015-2014 - One upon the time with Phishing Session..

2014-02-05

MalwareMustDie

Author: unixfreaxjp

techniques:phishing file_types:html techniques:honeypot malware_types:botnet file_types:so file_types:go file_types:javascript file_types:js techniques:encryption cloud_environments:aws

..And another "detonating" method of CookieBomb 2.0 - Part 2

2014-01-30

MalwareMustDie

Author: unixfreaxjp

file_types:so file_types:go file_types:php file_types:c file_types:javascript file_types:js techniques:obfuscation file_types:swift

..And another "detonating" method of CookieBomb 2.0 - Part 1

2014-01-23

MalwareMustDie

Author: unixfreaxjp

file_types:html techniques:code injection file_types:so file_types:go file_types:php file_types:javascript file_types:js platforms:windows platforms:ubuntu techniques:obfuscation

MMD-0014-2014 - New Locker: Prison Locker (aka: Power Locker)

2014-01-03

MalwareMustDie

Author: unixfreaxjp

malware_types:ransomware file_types:bin file_types:pe file_types:exe file_types:so file_types:go techniques:encryption file_types:cmd techniques:decryptor techniques:hooking

MMD-0013-2014 - "Shadow Logger" - .NET's FUD Keylogger

2014-01-02

MalwareMustDie

Author: unixfreaxjp

file_types:dll malware_types:rat file_types:pe file_types:exe malware_types:backdoor malware_types:trojan malware_types:dropper file_types:vb malware_types:keylogger disassembler:ida pro

MMD-0012-2013 - ARP Spoofing Malware

2013-12-29

MalwareMustDie

Author: unixfreaxjp

file_types:pe file_types:so file_types:go file_types:c platforms:windows file_types:cpp

Malware Analysis Reports