Malware Database

Database update for today. Files are available in /pnuemo-malware/ in our repository. Please visit our FAQ for information on gaining access to our repository.

BE ADVISED: These URL’s may still be active. Proceed at your own risk.

plaintext.exe (svc32.dll)
Result: 6/36 (16.67%)
MD5: 9b9ac40318a4c6a1d146e3e78b61bacd
VirusTotal
ThreatExpert Analysis
hxxp://killwinpc.com

ftpgrb.exe (flask32.dll)
Result: 10/36 (27.78%)
MD5: fabc648c06c09d91e313bdadaeb60dc0
VirusTotal
ThreatExpert Analysis
hxxp://killwinpc.com

fotos.inglesa.pif (mswinsck.jpg, svchost.jpg, pross2.jpg, process.jpg are downloaded as binaries)
Result: 12/36 (33.34%)
MD5: 128f2c588881eb839a4aa3a250636e43
VirusTotal
ThreatExpert Analysis
hxxp://suport2008.home.sapo.pt/fotos.inglesa.pif

svchost.jpg (svchost.exe)
Result: 18/36 (50%)
MD5: ca4750bcfdd9d032b1fdbee0a4e12c6d
VirusTotal
ThreatExpert Analysis
hxxp://suport2008.kit.net

mswinsck.jpg (mswinsck.exe)
Result: 2/36 (5.56%)
MD5: 6f0c03a2c24e2518f4dd4101dded5483
VirusTotal
ThreatExpert Analysis
hxxp://suport2008.kit.net

pross2.jpg & process.jpg (pross2.exe & process.exe) process.zip in repository
Result: 18/35 (51.43%)
MD5: 63159d242b4b6d74f92f393b62012c6e
VirusTotal
ThreatExpert Analysis
hxxp://suport2008.kit.net
hxxp://suport2008.kit.net