l00t

Starting malware hunter, with a special hate to botnets !

[l00t @loot_myself]

#ifwatch #malware around 13000 active bots identified.

[l00t @loot_myself]

#ifwatch One step closer, now I can finally start this #malware on my vm and OMG the build-in protected DEBUG mode gets cracked ! :-)

[l00t @loot_myself]

@pkosinar Thnxs mate, badly enough the AV makers didn't pick up the hashes yet. VT detection is still 0...

[l00t @loot_myself]

#ifwatch #malware See blog posts for more info : http://t.co/Fy61gKpjuB

[l00t @loot_myself]

#ifwatch #malware
Morning count :
211 seeds and 10642 bots.
CN 5436 bots
BR 644 bots
KR 606 bots
IT 604 bots
RU 466 bots
US 338 bots

[l00t @loot_myself]

#ifwatch #malware Infection Map.
Binaries collected, hashes decoded, infiltrated,
5000 bots,100 seed,still counting.

[l00t @loot_myself]

CASE 1 : Ifwatch Malware Part 2 http://t.co/mYtDKEAUu6

[l00t @loot_myself]

My very little contribution to #OpKKK

[l00t @loot_myself]

@MalwareMustDie did you had any time to look to the samples I dropped you last week ?

[l00t @loot_myself]

#ifwatch #malware Here are the SHA256 of all the arch specific binaries of this malware: http://t.co/8fAzXxE23j @kaspersky @McAfee @FSecure

[l00t @loot_myself]

CASE 1 : ifwatch malware http://t.co/gTva37YGQ9

[l00t @loot_myself]

Can't get my http://t.co/Lp7RnCxOLH account activated no admins to find on the board, no email specified for support or admins... Too Bad

[l00t @loot_myself]

#ifwatch #malware reversing completed, now find a place to post my findings...

[l00t @loot_myself]

Thanks to @DidierStevens for making @virustotal tools, makes my life lot easier ! http://t.co/OSp2was8ve

[l00t @loot_myself]

What's the best forum to post your #malware analysis/findings ?

[l00t @loot_myself]

Ok my pastbin has been removed, here is a fresh one http://t.co/tfVzP1zVX3

[l00t @loot_myself]

@MalwareMustDie : Upload Complete :-) #ifwatch 40 binaries for 10 target archs. I can provide more details of this to who wants.

[l00t @loot_myself]

Hi @unixfreaxjp sorry for this, but I'm not receiving my activation email from #kernelmode registration, tried some resend, with no luck :(

[l00t @loot_myself]

Here are the hashes of these files for who's interested VT ratio 0 for all of them http://t.co/Yy8qyJ8ZWG #ifwatch #malware

[l00t @loot_myself]

Took some time but I'm there, managed to get all your platform specific binaries #ifwatch #malware sending to @virustotal @MalwareMustDie