malwares.com

is a service to analyze various advanced, new-born, mutated malicious codes and URLs.

[malwares.com @malwarescom]

Today, we have a h/w malfunction in core storage controller. Now we changed the parts and are working on data verification.

[malwares.com @malwarescom]

금일 오전 10시 20분 경, https://t.co/GVz3MQ7Yyv 코어 스토리지 컨트롤러 장비에 하드웨어 불량이 발생해서 지금 조치 중에 있습니다. 오후 5시 30분 현재, 문제가 되는 장비는 교체하였고 중요 데이터 검증 중에 있습니다.

[malwares.com @malwarescom]

#malwares #virus #hack

this site has been hacked for distributing malware.

LINK: https://t.co/Gf0dkTO4HA

[malwares.com @malwarescom]

#malware #C2SERVER #ransomware

HASH:58ECD6B9E87F80026E3B063750F46166CF1FE21A5021F43FEFCE930376A2C26B
C2 LINK: https://t.co/wAAeFaArbB

[malwares.com @malwarescom]

#malware #shellcode
It is a interesting malware, reads the shellcode from the web and runs it.

[malwares.com @malwarescom]

#apk #Malware #virus #ppomppu
HASH: B211EE332DF868A51571FB2437787B94

This malware is distributed via famous community for android devices.

[malwares.com @malwarescom]

#Venuslocker #lnk #ransomware
MD5:8AF4F0240FD3FF01DE28859E3BFBF238

necessary to analyze why it runs doc file using shortcut.

[malwares.com @malwarescom]

#android #malware #memorydump

The encrypted DEX file is decrypted while running, so you can get the original code via memory-dump.

[malwares.com @malwarescom]

#malware #downloader #doc

C2 Server : 'https://t.co/BVWYSd0N1Y'

[malwares.com @malwarescom]

#malware #apk #dex #encryption

This Apk decrypts the encrypted binary and load it. The second picture is the code after decryption.

[malwares.com @malwarescom]

#malware #ircbot #hostsmodifier

The reason for tampering with the host seems to be to bypass Anti-Virus.

[malwares.com @malwarescom]

#malware #mydoc #AutoIt

It's malware made with AutoIt, and it's disguised as office document.

[malwares.com @malwarescom]

#malwares #injection #TWEXT #chrome
VAE > WPM > CreateRemoteThread
I am analyzing a malware which is hard to find in Korea.

[malwares.com @malwarescom]

#linux #ransomware #killdisk

Demands $250K ransom,but can't decrypt

[malwares.com @malwarescom]

#ransomware #trumplocker #malwares

imageURL: https://t.co/ri39o5LnTl
C2 Server : https://t.co/2hnaxbgdx0

[malwares.com @malwarescom]

#ransomware #malwares
This ransomware was signed with the stolen certificate which was terminated.
C2 Server : http://185.106.122.2

[malwares.com @malwarescom]

@cloudnine
Test Version : Microsoft Office Professional 2010 (14.0.4763.1000)
broken file is not running.

[malwares.com @malwarescom]

#Erebus #ransomware #malwares
Unlike other Ransomware, it has Tor Download Code in function
and demands low prices for decryption.($90)

[malwares.com @malwarescom]

#Marlboro #ransomware #xor #Malwares
Marlboro ransomware uses XOR-based encryption algorithm after renaming Encrypt files into ".oops"

[malwares.com @malwarescom]

#ransomware #malwares #lesli

ransomware changed the filename into "[Original Filename][hacker@email][computer_id]"
😂