Friday, February 6, 2009

Valentine-ware !

As you know, Happy Valentine Day just around the corner. People start keep sending valentine e-card to their friends for that special day. And of course, malware will propagate as well by entice users download file from malicious site by click on their lovely images.



All the files content(md5)are same with different name.

hxxp://bestgoodnews.com/ ->you.exe
hxxp://www.bestgoodnews.com/ ->onlyyou.exe
hxxp://bestlovelong.com/ ->meandyou.exe, youandme.exe
hxxp://www.bestlovelong.com/ ->love.exe

@:~/Desktop$ md5 you.exe
9feea0d0497010d4aa55dcba83d8d9f2 you.exe
@:~/Desktop$ md5 love.exe
9feea0d0497010d4aa55dcba83d8d9f2 love.exe
@:~/Desktop$ md5 meandyou.exe
9feea0d0497010d4aa55dcba83d8d9f2 meandyou.exe
@:~/Desktop$ md5 youandme.exe
9feea0d0497010d4aa55dcba83d8d9f2 youandme.exe
@:~/Desktop$ md5 onlyyou.exe
9feea0d0497010d4aa55dcba83d8d9f2 onlyyou.exe

Be safe and Happy Valentine !!!

0 comments: