API tools faq
paste
MalwareMustDie

MalwareMustDie's Pastebin

An archive of MMD pastes until 2014 (inactive, museums)    207,327 1,117,871 0 13 years ago
Name / Title Added Expires Hits Comments Syntax  
New Kelihos IP milked from new domain: OFCIWOX.COM Aug 9th, 2013 Never 2,270 0 None -
#MalwareMustDie! Kelihos IP Address for CLEAN-UPS Aug 8th, 2013 Never 2,276 0 None -
#MalwareMustDie! 623 Kelihos IP Address for CLEAN-UPS Aug 8th, 2013 Never 2,028 0 None -
#MalwareMustDie! Monitoring INTERNET.BS base Kelihos Domain Aug 6th, 2013 Never 3,135 0 None -
#MalwareMustDie! Kelihos Affiliated .COM Payload Domain Stat Aug 6th, 2013 Never 1,987 0 None -
#MalwareMustDie - UPDATE: Tango status of RunForrestRUn Case Aug 6th, 2013 Never 2,068 0 PHP -
#MawareMustDie Kelihos IP Milked in UNIX Aug 5th, 2013 Never 2,447 0 None -
#MalwareMustDie- #Kelihos .RU domains Status Today Aug 5th, 2013 Never 2,037 0 None -
#MalwareMustDie! #Kelihos NS Spreader Aug 5th, 2013 Never 1,977 0 None -
#MMD #UPDATE: Additional Kelihos Payload URL 100 domains Aug 2nd, 2013 Never 2,318 0 PHP -
#malwareMustDie! Credential slurp by trojan/PWS/ Fareit Aug 2nd, 2013 Never 2,233 0 None -
#MalwareMustDie! The POC lsit of ALIVE Zbot Jul 30th, 2013 Never 2,492 0 None -
#MalwareMustDie! New form of Neutrino EK landing page? Jul 26th, 2013 Never 3,599 0 JavaScript -
Exploit Kit JNLP Calls + Cookie Check + Java ver. Check Jul 26th, 2013 Never 2,084 0 None -
Suspected Kelihos ALive domain IP Addresses (Additional) Jul 25th, 2013 Never 2,279 0 None -
#MalwareMustDie! #ALERT: Kelihos IP & Domains STILL UP! Jul 19th, 2013 Never 2,101 0 None -
#MalwareMustDie! Kelihos payload URL via RedKit EK Jul 16th, 2013 Never 2,059 0 None -
*.MSI.COM got hacked, redirected to TDS to EK Jul 15th, 2013 Never 2,087 0 None -
#MalwareMustDie! #RedKit Infection Campaign /[a-z]{7}.php Jul 13th, 2013 Never 2,166 0 None -
#MalwareMustDie! ZERODAY of EXPLOIT KIT & EVIL PROXIES NGNIX Jul 11th, 2013 Never 2,876 0 None -
Today's Pony/zbot GO Jul 11th, 2013 Never 2,040 0 None -
#MalwareMustDie! Kuluoz CnC list Jul 8th, 2013 Never 2,608 0 None -
#MalwareMustDie! In war with Kuluoz network.. Jul 7th, 2013 Never 8,759 0 None -
#MalwareMustDie! Kuluoz #Botnet CnC Unleashed (#Tango ) Jul 4th, 2013 Never 5,640 0 None -
Win32/Matsnu #BotNet w/Fake TOR domains made in China Jul 3rd, 2013 Never 2,365 0 None -
#MalwareMustDie! Trojan AutoIT (v3 Script)/UPX Packed Jun 29th, 2013 Never 2,705 0 PowerShell -
#MalwareMustDie -Neutrino EK Landing Page Beautified Jun 25th, 2013 Never 3,823 0 JavaScript -
Domains with CNAME parked at: 81.88.48.79 Jun 24th, 2013 Never 2,940 0 None -
#MalwareMustDie! Neutrino Exploit Kit's PluginDetect 0.8.0 Jun 24th, 2013 Never 2,955 0 JavaScript -
#MalwareMustDie - Malicious domains Up&Alive 174.140.168.239 Jun 23rd, 2013 Never 1,962 0 None -
#MalwareMustDie - Pony case - Fareit Slupred Registry List Jun 21st, 2013 Never 2,307 0 None -
#MalwareMustDie - Pony case - Fareit Slupred Software List Jun 21st, 2013 Never 2,118 0 None -
Pony case - slupred Credential to send to Pony Jun 21st, 2013 Never 2,222 0 None -
Malvertisement using Fake HP Scan + Dup Your Network info Jun 20th, 2013 Never 2,078 0 None -
PWS/Pony slurped FTP Data... Jun 4th, 2013 Never 2,605 0 None -
#MalwareMustDie! Elf IRC-Backdoor FreeBSD/Linux May 30th, 2013 Never 2,538 0 None -
#MalwareMustDie Zbot Trojan Analysis / Spam Campaign Attach. May 28th, 2013 Never 7,569 0 None -
What's actually parked in (96.126.108.132) May 1st, 2013 Never 2,046 0 None -
VB/Worm callbacks domains %HEX%.info on 96.126.108.132 Apr 30th, 2013 Never 2,317 0 None -
#MMD Kelihos MOMMA Trojan .RU TangoDown Report Apr 24th, 2013 Never 2,252 0 None -
#MalwareMustDie - ZeuS open download Apr 22nd, 2013 Never 2,068 0 None -
#MalwareMustDie -kelihos Callbacks Host (#BOTNET) Apr 20th, 2013 Never 2,733 0 None -
#MalwareMustDie - Kelihos using this JAR for Boston Malvert. Apr 20th, 2013 Never 2,771 0 Java -
// Some of 44+ domains listed in 91.206.200.199 Apr 14th, 2013 Never 2,383 0 None -
#MalwareMustDie - RedKit Landing Page 2013 Apr 14th Apr 14th, 2013 Never 2,878 0 JavaScript -
Attention on the use of a previous version of Plesk Panel Apr 9th, 2013 Never 2,039 0 None -
#MalwareMustDie - Evidence of the fake FBI alert mail. Apr 7th, 2013 Never 2,018 0 None -
#MalwareMustDie! Disclosure: Vulnerable Plesk Panel Version Mar 28th, 2013 Never 3,269 0 None -
Malware infection source (BHEK2) IP: 174.122.39.251 Mar 27th, 2013 Never 2,024 0 None -
Sofos EK Malware Infector Landing page at 37.139.51.143 Mar 26th, 2013 Never 2,136 0 None -
Darkleech Module - import module + symbols used Mar 24th, 2013 Never 2,121 0 ASM (NASM) -
PWS Cridex/fareit Today - 2013 03-14 Mar 13th, 2013 Never 2,235 0 None -
#MalwareMustDie - New Cridex Payload Mar 12 2013 Mar 11th, 2013 Never 2,041 0 None -
#MalwareMustDie - Dangerous&Infector Domains 21.*.com Mar10 Mar 10th, 2013 Never 2,034 0 None -
#MMD - Cridex Downloaded Win32/Medfos Malware Downloader Mar 7th, 2013 Never 1,977 0 None -
#MalwareMustDie - New Cridex Payload Mar 06 2013 Mar 5th, 2013 Never 2,193 0 None -
#malwareMustDie - Trojan Win32/Fareit Steal List｜Mar 5 2013 Mar 5th, 2013 Never 2,163 0 None -
#MalwareMustDie - NAUNET.RU Affiliated Malware RU Domains Mar 2nd, 2013 Never 2,396 0 None -
#MalwareMustDie! LOP.COM has the Keyword Linked to FakeAV Mar 2nd, 2013 Never 2,058 0 JavaScript -
#MalwareMustDie - Thou Salt Not Hack + Inject Malware!! Mar 2nd, 2013 Never 2,073 0 JavaScript -
#MalwareMustDie - Warning: movieshuttle.net / 50.87.40.75 Mar 1st, 2013 Never 1,936 0 JavaScript -
#MalwareMustDie - Warning on: oklahomanews-online.com Mar 1st, 2013 Never 1,970 0 JavaScript -
Fake AV encountered at www.jonesfortenberry.com. Feb 21st, 2013 Never 2,123 0 None -
NAUNET(RU) The Credential Stealer Affiliate Registrar! Feb 20th, 2013 Never 2,069 0 None -
#MalwareMustDie - BHEK PD079 Disclosure -1- Feb 20th, 2013 Never 2,289 0 JavaScript -
#MalwareMustDie - ejjiipprr,ru ： GeoIP Cridex + Ransomware Feb 20th, 2013 Never 2,235 0 None -
#MMD - BlackHole EK w/GeoIP Double infector(Cridex+Ransomer) Feb 18th, 2013 Never 2,680 0 None -
#BHEK 2013-02-13- Trojan PWS Fareit Stolen Credential Lists Feb 13th, 2013 Never 2,120 0 None -
#MalwareMustDie - SWF of CVE-2013-6034 jinxed + decompiled Feb 10th, 2013 Never 2,519 0 None -
CVE-2013-0634 Exploit Vector Object building method.. Feb 10th, 2013 Never 2,105 0 None -
#MalwareMustDie - CVE-2013-6034 - debug, memory.. Feb 9th, 2013 Never 2,083 0 None -
#MalwareMustDie - The Debug trace of CVE-2013-0634 Feb 9th, 2013 Never 3,265 0 None -
Exploit assembly per flash version of CVE-2013-0634 Feb 9th, 2013 Never 2,173 0 None -
#MalwareMustDie! xudyhbes.ru TDS攻撃コードDB Feb 8th, 2013 Never 2,013 0 None -
#MalwareMUSTDie! acdastas.ru TDS 攻撃コードDB Feb 8th, 2013 Never 1,959 0 None -
BHEK "closest" ver. Multiple payloads - 20130207 #2(Germany) Feb 7th, 2013 Never 2,001 0 None -
BHEK + ZeroAccess 2013-02-07 #1 Feb 7th, 2013 Never 2,015 0 None -
BHEK "/closest/" PluginDetect 0.7.9 decoded: Feb 6th, 2013 Never 1,948 0 None -
#MalwareMustDie! ZeroAccess: killing processes PoC Feb 6th, 2013 Never 2,080 0 None -
#MMD - ZeroAccess "contacts.exe" Memory snapped strings Feb 5th, 2013 Never 2,096 0 None -
#MalwareMustDie - BHEK 20130205 contact.exe PID Feb 5th, 2013 Never 1,998 0 None -
#MalwareMustDie - BHEK 20120205 - PluginDetect079.c Feb 5th, 2013 Never 1,998 0 None -
#MalwareMustDie - BHEK 20130205 contact.exe strings Feb 5th, 2013 Never 2,052 0 None -
#MalwareMustDie - dune.exe .text encrypted Feb 4th, 2013 Never 2,025 0 None -
#MalwareMustDie - dune.exe .rdata post-decrypted Feb 4th, 2013 Never 2,198 0 None -
#malwareMustDie dune.exe decrypted calls Feb 4th, 2013 Never 2,065 0 None -
Checking of \windows\system32 for *.EXE by the Styx Payload Feb 4th, 2013 Never 2,024 0 None -
#MalwareMustDie - JDB Exploit Kit - Nayrabot IRC Malware Pld Feb 1st, 2013 Never 2,075 0 None -
#MalwareMustDie - JDB Exploit Kit Landing Page/PluginDetect Jan 30th, 2013 Never 3,172 0 JavaScript -
#malwareMustDie - CrimeBoss landing Page | 2013 Jan 29 Jan 29th, 2013 Never 2,466 0 None -
PID 1896 - KB00777165.exe #MalwareMustDie 20130126 Jan 26th, 2013 Never 1,987 0 None -
PID 4128 - exp%n.tmp.exe #MalwareMustDie 20130126 Jan 26th, 2013 Never 2,022 0 None -
PID 2152 - cmd.exe #MalwareMustDie 20130126 Jan 26th, 2013 Never 2,059 0 None -
PID 2116 - about.exe #MalwareMustDie 20130126 Jan 26th, 2013 Never 2,004 0 None -
#MalwareMustDie - Infection of Cridex/Fareit () Jan 26th, 2013 Never 2,140 0 None -
#MalwareMustDie - REDKIT INFECTION >> 2003 JAN 25 Jan 26th, 2013 Never 2,007 0 None -
#MalwareMustDie - Suspected PDF 0day (3)w/detected LibTiff Jan 24th, 2013 Never 1,985 0 None -
#MalwareMustDie - Suspected PDF 0day (new)w/detected LibTiff Jan 23rd, 2013 Never 2,124 0 None -
Apache Blackhole - PD079 Cracked #malwareMustDie 20130120 Jan 19th, 2013 Never 2,422 0 JavaScript -
Cridex Infection - Fareit trojan Credential Stolen - BHEK Jan 16th, 2013 Never 2,760 0 None -
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!