Backdoor.Win32.DarkKomet.bhfh malware suffers from an insecure permissions vulnerability.
19db0f71751a30f61bad2714f3347026Backdoor.Win32.Wollf.16 malware creates and runs a service named contime.exe with SYSTEM integrity and listens on port 5240. The malware uses a weak hardcoded password of 12345678 which can easily be viewed in the binary using strings utility.
6641101a924d25a5237609e14628fd2fTrojan.Win32.Xocry.ff malware suffers from an insecure permissions vulnerability.
932a00f5f7015f7fbe93a8d4673539e6Backdoor.Win32.Jokerdoor malware suffers from an insecure permissions vulnerability.
97d09d3f08ee1102c8538c08bc78ea63Backdoor.Win32.Noknok.50 malware suffers from an insecure permissions vulnerability.
9233b2cdf687f9dc14f44beebe52c0d0Backdoor.Win32.Noknok.60 malware suffers from an insecure permissions vulnerability.
cc7c1dae57451133f8576fb4156cd43fBackdoor.Win32.Kraimer.11 malware has a backdoor on TCP/6668 that does not require any authentication.
ab7914a32014a552e8902d32415b1aedBackdoor.Win32.Hupigon.adef malware suffers from a remote stack buffer overflow vulnerability.
56dcff006711ea9da6145c956545867e143 bytes small Windows/x86 stager generic MSHTA shellcode.
cd26783c34c055b8e7b1aa54b1801d75Backdoor.Win32.Xel malware suffers from a remote authentication-related buffer overflow vulnerability.
86ce28c9e275557be43957e097c1a73aBackdoor.Win32.Verify.f malware has backdoors running on TCP ports 1906 and 1907 that do not require any authentication.
ca8e4a026f7a8a413a34154343153445Backdoor.Win32.WinShell.30 malware suffers from remote stack buffer overflow and missing authentication vulnerabilities.
6b603f2efdd114008cbac8105f5cc6f7Backdoor.Win32.Onalf malware has a backdoor running on TCP/2020 that does not require any authentication.
8413023933171cccf3cf8f346fc00dc6Backdoor.Win32.Zxman malware has a backdoor running on TCP/2048 that does not require any authentication.
e59d2f563516bdcc00be9a6bd0fe9c3eBackdoor.Win32.Whisper.b malware suffers from a remote stack corruption vulnerability.
4bd5113d73f55e63e170f6485cf89911Backdoor.Win32.Whirlpool.10 malware suffers from a remote stack buffer overflow vulnerability.
c3d3b273680f8c02a4ca076c42f19836Backdoor.Win32.Zombam.geq malware suffers from a remote buffer overflow vulnerability.
0e05a63a804977c46a87862508e94e15Backdoor.Win32.NetBull.11.a malware suffers from a remote buffer overflow vulnerability.
c7e98adc9680b9ba74fa492156661473Email-Worm.Win32.Agent.gi malware suffers from a remote stack buffer overflow vulnerability.
4cd0dcc841eb9464b95eea555c050501Constructor.Win32.SMWG.c malware suffers from an insecure permissions vulnerability.
e122f5165b2281d0ce329bb9e0e184e9Constructor.Win32.SMWG.a suffers from an insecure permissions vulnerability.
5fad881b745d1314ea203b37f2d103fcBackdoor.Win32.Mnets malware suffers from a remote stack buffer overflow vulnerability.
5d8aad9a560a7ece945d0fe95285e29dBackdoor.Win32.Whgrx malware suffers from a remote host header stack buffer overflow vulnerability.
029e2786ef07f0a4088dd28099d0c0baBackdoor.Win32.Latinus.b malware suffers from a remote buffer overflow vulnerability.
b661fe827bf583c7569949c8d8a2da77Backdoor.Win32.Ncx.bt malware suffers from a remote stack buffer overflow vulnerability.
f5bce01787682bf3fb97234b39073682
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed