Unixfreaxjp's Pastebin

Japan 2,652 136,914 0 14 years ago

Name / Title	Added	Expires	Hits	Comments	Syntax
平成２５年８月１２日のKELIHOSに国内感染IP情報は134件	Aug 12th, 2013	Never	452	0	None	-
平成２５年８月１１日付け、日本国内KELIHOSボットネット感染IP	Aug 11th, 2013	Never	350	0	None	-
#MalwareMustDie! Kelihos payload URL via #RedKit EK	Jul 16th, 2013	Never	305	0	None	-
CookieBombインジェクションに感染されたサイトのアクセスログ...	Jul 15th, 2013	Never	341	0	None	-
Win32/Fareit Depacked Strings	Mar 7th, 2013	Never	615	0	None	-
ZeroAccess BHEK /closest/	Feb 6th, 2013	Never	307	0	None	-
DFIR - DarkKomet? File I/O	Feb 1st, 2013	Never	413	0	None	-
DFIR - DarkKomet? Regshot	Feb 1st, 2013	Never	372	0	None	-
DFIR - TcpAdaptorService.exe - Memory Dump Strings..	Jan 31st, 2013	Never	477	0	None	-
DFIR - TcpAdaptorService.exe - Reg	Jan 31st, 2013	Never	330	0	None	-
DFIR - TcpAdaptorService.exe - Daemon/Net start	Jan 31st, 2013	Never	322	0	None	-
DFIR - TcpAdaptorService.exe - kickstart	Jan 31st, 2013	Never	337	0	None	-
BHEK PluginDetect OBFS during border.htm storm infection	Oct 21st, 2012	Never	3,736	0	None	-
New Pseudo Decoded #MalwareMustDie	Oct 19th, 2012	Never	311	0	None	-
New Pseudo #MalwareMustDie	Oct 19th, 2012	Never	249	0	None	-
TO ISEC Labsre: w***wet bug PoC with fixing ADVICE	Oct 19th, 2012	Never	404	0	None	-
The BHEK2 Citadel Download these two more...	Oct 17th, 2012	Never	295	0	None	-
BHEK2 w/ e,f PluginDetect Param, Drop Trojan/Stealer/DLoader	Oct 17th, 2012	Never	6,859	0	None	-
#PHP/C99SHELL: ELF Obfs binary Backdoors + BackConnect! ()	Oct 14th, 2012	Never	12,488	0	None	-
ritchieblackmore.info injected by fake malware guestbook url	Oct 14th, 2012	Never	293	0	None	-
BOXIFY.ME FILE SHARING IS USED AS MALWARE PARK PLACE	Oct 14th, 2012	Never	338	0	None	-
result of Pseudorandom : Suspected EK	Oct 14th, 2012	Never	294	0	None	-
#Blackhole Infector pairs 173.236.136.84 and 67.208.74.71	Oct 3rd, 2012	Never	318	0	None	-
Infection se undetected #Zbot/#Fareit variant via Blackhole2	Oct 1st, 2012	Never	346	0	None	-
Chinese ExploitKit/CVE-2012-1889\| FakeIME InfoStealer Trojan	Sep 29th, 2012	Never	571	0	None	-
A PHP/Backdoor drops C99Shell Sophisticated Variant!	Sep 29th, 2012	Never	55,228	0	None	-
PHP/C99SHELL: Backdoors! (xtgem.com)	Sep 29th, 2012	Never	627	6	None	-
Pseudo DNS/A w/injected code (NEW) & tor blocker(NEW)	Sep 20th, 2012	Never	412	0	None	-
BHEK Landing page Obfs #MalwareMustDie	Sep 18th, 2012	Never	662	0	None	-
BHEK Landing page Deobfs #MalwareMustDie	Sep 18th, 2012	Never	381	0	None	-
RedKit Infector Domain : qaqipwel.ru	Sep 16th, 2012	Never	277	0	None	-
Slight changes in shellcode BHEK dropped payload calls	Sep 15th, 2012	Never	432	0	None	-
Slight changes in shellcode BHEK deobfs	Sep 15th, 2012	Never	584	0	None	-
Slight changes in shellcode BHEK obfs	Sep 15th, 2012	Never	1,632	0	None	-
CVE-2012-4681 Payload Call/DLL List	Sep 12th, 2012	Never	353	0	None	-
CVE-2012-4681 Dropper	Sep 12th, 2012	Never	357	0	None	-
#malwareMustDie - Java Infector Trap HTML Page	Sep 12th, 2012	Never	310	0	None	-
Blackhole OS/Browser Detect Plugin w/ShellCode Deobfs'ed	Sep 5th, 2012	Never	343	0	None	-
Blackhole Dropped PDF exploit CVE-2009-0927 deobfuscated	Sep 5th, 2012	Never	319	0	None	-
Blackhole Dropped PDF with obfuscation CVE-2009-0927	Sep 5th, 2012	Never	318	0	None	-
Firefox Agent Test for the Orange EK	Aug 30th, 2012	Never	316	0	None	-
#FreeBSD: DISABLE ACPI	Jun 19th, 2012	Never	214	0	None	-
#OCJP-040 New Variant PHP/IRC DoS Tools (Win32/Posix)	May 2nd, 2012	Never	2,381	13	None	-
#reversing #Tips - The Assembly Language Debugger(ald)	Apr 29th, 2012	Never	432	0	None	-
*REMNUX TIPS*	Apr 28th, 2012	Never	397	0	None	-
#Malware Analysis - BlackHole PDF CVE-2010-0188 Infector)	Apr 28th, 2012	Never	1,006	8	None	-
#remnux #Tips #Tools Upgrading VOLATILITY to latest version	Apr 28th, 2012	Never	513	0	None	-
#Malware #Tools #Tips - Memory Analysis w/ #Volatility	Apr 23rd, 2012	Never	619	0	None	-
#Malware memory Analysis w/ Volatility (#Tips)	Apr 23rd, 2012	Never	406	0	None	-
WORDPRESS WEB VULNS & GOT INFECTED SITES ON 2012, APRIL 19TH	Apr 19th, 2012	Never	353	0	None	-
Malware Anlsys2 PDF/CVE-2009-0927/Adobe getIcon Exploit Pack	Apr 19th, 2012	Never	464	0	None	-
#Malware Anlsys PDF/CVE-2009-0927/Adobe getIcon Exploit Pack	Apr 19th, 2012	Never	33,851	0	None	-
The Return of the CHINESE TROJANS SET in ODN Softbank N/W	Mar 26th, 2012	Never	337	0	None	-
False Positive for some advertisement IFRAME "JS/iFrame.cqo"	Mar 12th, 2012	Never	443	0	None	-
Twitter Booby Trap Link	Mar 3rd, 2012	Never	511	0	None	-
Public Servers shutdowned botnets in their network	Feb 24th, 2012	Never	339	0	None	-
False Positive URL \| Check from Jan 1st, 2012	Feb 11th, 2012	Never	711	0	None	-
Vuxml.org's DNS is DOWN - checkSat Jan 21 13:29:49 JST 2012	Jan 20th, 2012	Never	351	0	None	-