New Gholee samples spotted in the wild

显示全部楼层 · 发表于 2015-3-30 22:07:04

New Gholee samples spotted in the wild, of course AV don't detect them.

https://www.virustotal.com/en/fi ... b0f72d7c2/analysis/ (2 / 57)

https://www.virustotal.com/en/fi ... a9cc3aa8d/analysis/ (2 / 57)

https://www.virustotal.com/en/fi ... 00ffa5312/analysis/ (1 / 57)

Previous info:
Introducing Gholee - http://securityaffairs.co/wordpr ... /gholee-malware.htm
Shared samples - https://pastebin.com/C5YpKX4Y
Yara rule - https://pastebin.com/fm1mb6qX
Malicious Macro - https://pastebin.com/Kz45uVma

显示全部楼层 · 发表于 2015-3-30 22:08:20

蛋挞全部miss

显示全部楼层 · 发表于 2015-3-30 22:12:20

过卡巴，已上报！！！

显示全部楼层 · 发表于 2015-3-30 22:19:01

开开心心卖手机发表于 2015-3-30 22:08
蛋挞全部miss

那偶就不测试了

显示全部楼层 · 发表于 2015-3-30 22:20:17

NS22万物杀双杀

显示全部楼层 · 发表于 2015-3-30 22:23:09

ericdj 发表于 2015-3-30 22:19
那偶就不测试了

你帮我去测双击呗好不好嘛

显示全部楼层 · 发表于 2015-3-30 22:35:17

SUD to BAV

显示全部楼层 · 发表于 2015-3-30 22:40:02

360 fs miss

显示全部楼层 · 发表于 2015-3-30 22:42:49

att.kafan.cn/forum.php is in the category存在安全风险:恶意网站 Your FortiClient administrator has blocked this category
Wrong Category?Click Here

显示全部楼层 · 发表于 2015-3-30 23:15:31

开开心心卖手机发表于 2015-3-30 22:23
你帮我去测双击呗好不好嘛

呵呵呵呵呵呵~~~~~~~

双击党表示，亚历山大~~~更何况小白不会用沙箱

[其他相关] New Gholee samples spotted in the wild

本帖子中包含更多资源

本帖子中包含更多资源