Unixfreaxjp's Pastebin

Japan 2,318 106,141 0 12 years ago

Name / Title	Added	Expires	Hits	Syntax
平成２５年８月１２日のKELIHOSに国内感染IP情報は134件	Aug 12th, 2013	Never	289	None	-
平成２５年８月１１日付け、日本国内KELIHOSボットネット感染IP	Aug 11th, 2013	Never	202	None	-
#MalwareMustDie! Kelihos payload URL via #RedKit EK	Jul 16th, 2013	Never	173	None	-
CookieBombインジェクションに感染されたサイトのアクセスログ...	Jul 15th, 2013	Never	159	None	-
Win32/Fareit Depacked Strings	Mar 7th, 2013	Never	498	None	-
ZeroAccess BHEK /closest/	Feb 6th, 2013	Never	174	None	-
DFIR - DarkKomet? File I/O	Feb 1st, 2013	Never	285	None	-
DFIR - DarkKomet? Regshot	Feb 1st, 2013	Never	239	None	-
DFIR - TcpAdaptorService.exe - Memory Dump Strings..	Jan 31st, 2013	Never	300	None	-
DFIR - TcpAdaptorService.exe - Reg	Jan 31st, 2013	Never	182	None	-
DFIR - TcpAdaptorService.exe - Daemon/Net start	Jan 31st, 2013	Never	195	None	-
DFIR - TcpAdaptorService.exe - kickstart	Jan 31st, 2013	Never	172	None	-
BHEK PluginDetect OBFS during border.htm storm infection	Oct 21st, 2012	Never	2,362	None	-
New Pseudo Decoded #MalwareMustDie	Oct 19th, 2012	Never	137	None	-
New Pseudo #MalwareMustDie	Oct 19th, 2012	Never	117	None	-
TO ISEC Labsre: w***wet bug PoC with fixing ADVICE	Oct 19th, 2012	Never	259	None	-
The BHEK2 Citadel Download these two more...	Oct 17th, 2012	Never	160	None	-
BHEK2 w/ e,f PluginDetect Param, Drop Trojan/Stealer/DLoader	Oct 17th, 2012	Never	6,689	None	-
#PHP/C99SHELL: ELF Obfs binary Backdoors + BackConnect! ()	Oct 14th, 2012	Never	801	None	-
ritchieblackmore.info injected by fake malware guestbook url	Oct 14th, 2012	Never	159	None	-
BOXIFY.ME FILE SHARING IS USED AS MALWARE PARK PLACE	Oct 14th, 2012	Never	183	None	-
result of Pseudorandom : Suspected EK	Oct 14th, 2012	Never	143	None	-
#Blackhole Infector pairs 173.236.136.84 and 67.208.74.71	Oct 3rd, 2012	Never	163	None	-
Infection se undetected #Zbot/#Fareit variant via Blackhole2	Oct 1st, 2012	Never	198	None	-
Chinese ExploitKit/CVE-2012-1889\| FakeIME InfoStealer Trojan	Sep 29th, 2012	Never	420	None	-
A PHP/Backdoor drops C99Shell Sophisticated Variant!	Sep 29th, 2012	Never	50,305	None	-
PHP/C99SHELL: Backdoors! (xtgem.com)	Sep 29th, 2012	Never	346	None	-
Pseudo DNS/A w/injected code (NEW) & tor blocker(NEW)	Sep 20th, 2012	Never	268	None	-
BHEK Landing page Obfs #MalwareMustDie	Sep 18th, 2012	Never	314	None	-
BHEK Landing page Deobfs #MalwareMustDie	Sep 18th, 2012	Never	218	None	-
RedKit Infector Domain : qaqipwel.ru	Sep 16th, 2012	Never	145	None	-
Slight changes in shellcode BHEK dropped payload calls	Sep 15th, 2012	Never	247	None	-
Slight changes in shellcode BHEK deobfs	Sep 15th, 2012	Never	371	None	-
Slight changes in shellcode BHEK obfs	Sep 15th, 2012	Never	409	None	-
CVE-2012-4681 Payload Call/DLL List	Sep 12th, 2012	Never	175	None	-
CVE-2012-4681 Dropper	Sep 12th, 2012	Never	191	None	-
#malwareMustDie - Java Infector Trap HTML Page	Sep 12th, 2012	Never	185	None	-
Blackhole OS/Browser Detect Plugin w/ShellCode Deobfs'ed	Sep 5th, 2012	Never	195	None	-
Blackhole Dropped PDF exploit CVE-2009-0927 deobfuscated	Sep 5th, 2012	Never	185	None	-
Blackhole Dropped PDF with obfuscation CVE-2009-0927	Sep 5th, 2012	Never	180	None	-
Firefox Agent Test for the Orange EK	Aug 30th, 2012	Never	180	None	-
#FreeBSD: DISABLE ACPI	Jun 19th, 2012	Never	97	None	-
#OCJP-040 New Variant PHP/IRC DoS Tools (Win32/Posix)	May 2nd, 2012	Never	1,682	None	-
#reversing #Tips - The Assembly Language Debugger(ald)	Apr 29th, 2012	Never	281	None	-
*REMNUX TIPS*	Apr 28th, 2012	Never	267	None	-
#Malware Analysis - BlackHole PDF CVE-2010-0188 Infector)	Apr 28th, 2012	Never	480	None	-
#remnux #Tips #Tools Upgrading VOLATILITY to latest version	Apr 28th, 2012	Never	339	None	-
#Malware #Tools #Tips - Memory Analysis w/ #Volatility	Apr 23rd, 2012	Never	459	None	-
#Malware memory Analysis w/ Volatility (#Tips)	Apr 23rd, 2012	Never	256	None	-
WORDPRESS WEB VULNS & GOT INFECTED SITES ON 2012, APRIL 19TH	Apr 19th, 2012	Never	241	None	-
Malware Anlsys2 PDF/CVE-2009-0927/Adobe getIcon Exploit Pack	Apr 19th, 2012	Never	313	None	-
#Malware Anlsys PDF/CVE-2009-0927/Adobe getIcon Exploit Pack	Apr 19th, 2012	Never	31,490	None	-
The Return of the CHINESE TROJANS SET in ODN Softbank N/W	Mar 26th, 2012	Never	189	None	-
False Positive for some advertisement IFRAME "JS/iFrame.cqo"	Mar 12th, 2012	Never	303	None	-
Twitter Booby Trap Link	Mar 3rd, 2012	Never	192	None	-
Public Servers shutdowned botnets in their network	Feb 24th, 2012	Never	178	None	-
False Positive URL \| Check from Jan 1st, 2012	Feb 11th, 2012	Never	588	None	-
Vuxml.org's DNS is DOWN - checkSat Jan 21 13:29:49 JST 2012	Jan 20th, 2012	Never	221	None	-