RE: Malware Sample 09-26-2012, 12:57 AM
#2
FBI Money Pack Varients
scanned at virus total.com
sample 1
File: FBI.Moneypack[easymode].7z
SHA256: 601f0b9e412a17c693a2ab8d3a4a34a9cf72c9d4f4f55909adfd2fff1f5762a6
SHA1: afad0d6a6acab63c450e33419f4291aadf2dac25
MD5: 7479dbb508c6c96ae44892b9d0c3f6da
File size: 59.4 KB ( 60775 bytes )
File name: msiiexx.exe
File type: Win32 EXE
Detection ratio: 34 / 43
Analysis date: 2012-09-25 23:42:59 UTC ( 0 minutes ago )
download:
https://multiupload.biz/taluszmf2z56/FBI...iz.7z.html
second submission:
FBI.Moneypack_Trojan.Winlock.6412.7z
SHA256: 739ee618037525295ea79ac28c4a05e856f01265f1be5d8e2283a0c15415039d
SHA1: 86c189c09962b5d38e7deebf112c7ecdefaa5db4
MD5: c0fb09a30dc4873e1806bfd317984de1
File size: 207.4 KB ( 212335 bytes )
File name: C0FB09A30DC4873E1806BFD317984DE1
File type: Win32 EXE
Tags: peexe
Detection ratio: 32 / 41
Analysis date: 2012-09-15 01:33:09 UTC ( 1 week, 3 days ago )
download
https://multiupload.biz/vzdcy49ittig/FBI...iz.7z.html
no password protection.
scanned at virus total.com
sample 1
File: FBI.Moneypack[easymode].7z
SHA256: 601f0b9e412a17c693a2ab8d3a4a34a9cf72c9d4f4f55909adfd2fff1f5762a6
SHA1: afad0d6a6acab63c450e33419f4291aadf2dac25
MD5: 7479dbb508c6c96ae44892b9d0c3f6da
File size: 59.4 KB ( 60775 bytes )
File name: msiiexx.exe
File type: Win32 EXE
Detection ratio: 34 / 43
Analysis date: 2012-09-25 23:42:59 UTC ( 0 minutes ago )
download:
https://multiupload.biz/taluszmf2z56/FBI...iz.7z.html
second submission:
FBI.Moneypack_Trojan.Winlock.6412.7z
SHA256: 739ee618037525295ea79ac28c4a05e856f01265f1be5d8e2283a0c15415039d
SHA1: 86c189c09962b5d38e7deebf112c7ecdefaa5db4
MD5: c0fb09a30dc4873e1806bfd317984de1
File size: 207.4 KB ( 212335 bytes )
File name: C0FB09A30DC4873E1806BFD317984DE1
File type: Win32 EXE
Tags: peexe
Detection ratio: 32 / 41
Analysis date: 2012-09-15 01:33:09 UTC ( 1 week, 3 days ago )
download
https://multiupload.biz/vzdcy49ittig/FBI...iz.7z.html
no password protection.
(This post was last modified: 09-27-2012, 11:17 AM by Oni.)

![[+]](https://sinister.li/images/modern/collapse_collapsed.png)