Citadel PoC

#MalwareMustDie - A Note of Citadel PoC

1. http://188.225.33.165/ssdc32716372/gate.php

Evidence:
http://lists.clean-mx.com/pipermail/viruswatch/20130830/089309.html (report)
http://urlquery.net/report.php?id=7128625 (report)

https://www.virustotal.com/en/url/47aec0fd3b7ceb06530473c7fceb1ccd16748e52a63b9c2cb95d9ae048a5286c/analysis/ (gates)
https://www.virustotal.com/en/url/e4d64a1554e855088f8f5f6d4a80b16edb091d3bf48db819177c50f83f18d76c/analysis/ (gates)


2. http://188.225.33.165/ssdc32716372/file.php

Evidence:
https://www.virustotal.com/en/url/35ab7adbcc820efa46f0b5af94c1d87f06537652889fcc1ee5d03cf3e129be2a/analysis/ --> https://www.virustotal.com/en/file/7b82bf2481b51fd5a7fc28bd23e86d42fb9fa218fb68b02516ab5df35f574701/analysis/1391423496/ (config)
https://www.virustotal.com/en/url/26607f42325aa6c030b85aab81fd74c796521c620b7dbc1a547d3e51dced7242/analysis/ (config)
http://urlquery.net/report.php?id=6792918 (report)
http://urlquery.net/report.php?id=7128625 (report)
http://urlquery.net/report.php?id=4524691 (report)

---
#MalwareMustDie!