Twitter Updates

    follow me on Twitter

    List for 4.5% and get 1% cash back on your purchase

    Tuesday, May 19, 2020

    Wirelurker For OSX, iOS (Part I) And Windows (Part II) Samples


    PART II

    Wirelurker for Windows (WinLurker)

    Research: Palo Alto Claud Xiao: Wirelurker for Windows

    Sample credit: Claud Xiao



    PART I


    Research: Palo Alto Claud Xiao WIRELURKER: A New Era in iOS and OS X Malware

    Palo Alto |Claud Xiao - blog post Wirelurker

    Wirelurker Detector https://github.com/PaloAltoNetworks-BD/WireLurkerDetector


    Sample credit: Claud Xiao


    Download

    Download Part I
    Download Part II

    Email me if you need the password




    List of files
    List of hashes 

    Part II

    s+«sìÜ 3.4.1.dmg 925cc497f207ec4dbcf8198a1b785dbd
    apps.ipa 54d27da968c05d463ad3168285ec6097
    WhatsAppMessenger 2.11.7.exe eca91fa7e7350a4d2880d341866adf35
    使用说明.txt 3506a0c0199ed747b699ade765c0d0f8
    libxml2.dll c86bebc3d50d7964378c15b27b1c2caa
    libiconv-2_.dll 9c8170dc4a33631881120a467dc3e8f7
    msvcr100.dll bf38660a9125935658cfa3e53fdc7d65
    libz_.dll bd3d1f0a3eff8c4dd1e993f57185be75
    mfc100u.dll f841f32ad816dbf130f10d86fab99b1a

    zlib1.dll c7d4d685a0af2a09cbc21cb474358595


    │   apps.ipa
    │   σ╛«σìÜ 3.4.1.dmg

    └───WhatsAppMessenger 2.11.7
                libiconv-2_.dll
                libxml2.dll
                libz_.dll
                mfc100u.dll
                msvcr100.dll
                WhatsAppMessenger 2.11.7.exe
                zlib1.dll
                使用说明.txt


    Part I

    BikeBaron 15e8728b410bfffde8d54651a6efd162
    CleanApp c9841e34da270d94b35ae3f724160d5e
    com.apple.MailServiceAgentHelper dca13b4ff64bcd6876c13bbb4a22f450
    com.apple.appstore.PluginHelper c4264b9607a68de8b9bbbe30436f5f28
    com.apple.appstore.plughelper.plist 94a933c449948514a3ce634663f9ccf8
    com.apple.globalupdate.plist f92640bed6078075b508c9ffaa7f0a78
    com.apple.globalupdate.plist f92640bed6078075b508c9ffaa7f0a78
    com.apple.itunesupdate.plist 83317c311caa225b17ac14d3d504387d
    com.apple.machook_damon.plist 6507f0c41663f6d08f497ab41893d8d9
    com.apple.machook_damon.plist 6507f0c41663f6d08f497ab41893d8d9
    com.apple.MailServiceAgentHelper.plist e6e6a7845b4e00806da7d5e264eed72b
    com.apple.periodic-dd-mm-yy.plist bda470f4568dae8cb12344a346a181d9
    com.apple.systemkeychain-helper.plist fd7b1215f03ed1221065ee4508d41de3
    com.apple.watchproc.plist af772d9cca45a13ca323f90e7d874c2c
    FontMap1.cfg 204b4836a9944d0f19d6df8af3c009d5
    foundation 0ff51cd5fe0f88f02213d6612b007a45
    globalupdate 9037cf29ed485dae11e22955724a00e7
    globalupdate 9037cf29ed485dae11e22955724a00e7
    itunesupdate a8dfbd54da805d3c52afc521ab7b354b
    libcrypto.1.0.0.dylib 4c5384d667215098badb4e850890127b
    libcrypto.1.0.0.dylib 3b533eeb80ee14191893e9a73c017445
    libiconv.2.dylib 94f9882f5db1883e7295b44c440eb44c
    libiconv.2.dylib fac8ef9dabdb92806ea9b1fde43ad746
    libimobiledevice.4.dylib c596adb32c143430240abbf5aff02bc0
    libimobiledevice.4.dylib 5b0412e19ec0af5ce375b8ab5a0bc5db
    libiodb.dylib bc3aa0142fb15ea65de7833d65a70e36
    liblzma.5.dylib 5bdfd2a20123e0893ef59bd813b24105
    liblzma.5.dylib 9ebf9c0d25e418c8d0bed2a335aac8bf
    libplist.2.dylib 903cbde833c91b197283698b2400fc9b
    libplist.2.dylib 109a09389abef9a9388de08f7021b4cf
    libssl.1.0.0.dylib 49b937c9ff30a68a0f663828be7ea704
    libssl.1.0.0.dylib ab09435c0358b102a5d08f34aae3c244
    libusbmuxd.2.dylib e8e0663c7c9d843e0030b15e59eb6f52
    libusbmuxd.2.dylib 9efb552097cf4a408ea3bab4aa2bc957
    libxml2.2.dylib 34f14463f28d11bd0299f0d7a3985718
    libxml2.2.dylib 95506f9240efb416443fcd6d82a024b9
    libz.1.dylib 28ef588ba7919f751ae40719cf5cffc6
    libz.1.dylib f2b19c7a58e303f0a159a44d08c6df63
    libzip.2.dylib 2a42736c8eae3a4915bced2c6df50397
    machook 5b43df4fac4cac52412126a6c604853c
    machook ecb429951985837513fdf854e49d0682
    periodicdate aa6fe189baa355a65e6aafac1e765f41
    pphelper 2b79534f22a89f73d4bb45848659b59b
    sfbase.dylib bc3aa0142fb15ea65de7833d65a70e36
    sfbase.dylib bc3aa0142fb15ea65de7833d65a70e36
    sfbase_v4000.dylib 582fcd682f0f520e95af1d0713639864
    sfbase_v4001.dylib e40de392c613cd2f9e1e93c6ffd05246
    start e3a61139735301b866d8d109d715f102
    start e3a61139735301b866d8d109d715f102
    start.sh 3fa4e5fec53dfc9fc88ced651aa858c6
    stty5.11.pl dea26a823839b1b3a810d5e731d76aa2
    stty5.11.pl dea26a823839b1b3a810d5e731d76aa2
    systemkeychain-helper e03402006332a6e17c36e569178d2097
    watch.sh 358c48414219fdbbbbcff90c97295dff
    WatchProc a72fdbacfd5be14631437d0ab21ff960
    7b9e685e89b8c7e11f554b05cdd6819a 7b9e685e89b8c7e11f554b05cdd6819a
    update 93658b52b0f538c4f3e17fdf3860778c
    start.sh 9adfd4344092826ca39bbc441a9eb96f

    File listing

    ├───databases
    │       foundation
    ├───dropped
    │   ├───version_A
    │   │   │   com.apple.globalupdate.plist
    │   │   │   com.apple.machook_damon.plist
    │   │   │   globalupdate
    │   │   │   machook
    │   │   │   sfbase.dylib
    │   │   │   watch.sh
    │   │   │
    │   │   ├───dylib
    │   │   │       libcrypto.1.0.0.dylib
    │   │   │       libiconv.2.dylib
    │   │   │       libimobiledevice.4.dylib
    │   │   │       liblzma.5.dylib
    │   │   │       libplist.2.dylib
    │   │   │       libssl.1.0.0.dylib
    │   │   │       libusbmuxd.2.dylib
    │   │   │       libxml2.2.dylib
    │   │   │       libz.1.dylib
    │   │   │
    │   │   ├───log
    │   │   └───update
    │   ├───version_B
    │   │       com.apple.globalupdate.plist
    │   │       com.apple.itunesupdate.plist
    │   │       com.apple.machook_damon.plist
    │   │       com.apple.watchproc.plist
    │   │       globalupdate
    │   │       itunesupdate
    │   │       machook
    │   │       start
    │   │       WatchProc
    │   │
    │   └───version_C
    │       │   com.apple.appstore.plughelper.plist
    │       │   com.apple.appstore.PluginHelper
    │       │   com.apple.MailServiceAgentHelper
    │       │   com.apple.MailServiceAgentHelper.plist
    │       │   com.apple.periodic-dd-mm-yy.plist
    │       │   com.apple.systemkeychain-helper.plist
    │       │   periodicdate
    │       │   stty5.11.pl
    │       │   systemkeychain-helper
    │       │
    │       └───manpath.d
    │               libcrypto.1.0.0.dylib
    │               libiconv.2.dylib
    │               libimobiledevice.4.dylib
    │               libiodb.dylib
    │               liblzma.5.dylib
    │               libplist.2.dylib
    │               libssl.1.0.0.dylib
    │               libusbmuxd.2.dylib
    │               libxml2.2.dylib
    │               libz.1.dylib
    │               libzip.2.dylib
    ├───iOS
    │       sfbase.dylib
    │       sfbase_v4000.dylib
    │       sfbase_v4001.dylib
    │       start
    │       stty5.11.pl
    ├───IPAs
    │       7b9e685e89b8c7e11f554b05cdd6819a
    │       pphelper
    ├───original
    │       BikeBaron
    │       CleanApp
    │       FontMap1.cfg
    │       start.sh
    └───update
            start.sh
            update

    Related news


    No comments:

    Post a Comment

    Home for sale- $2,000 rebate!

    Ready Real Estate slide show

    Become a fan of my page

    Sheree Dutton, Reatlor, DFW, Texas on Facebook
    Powered By Blogger

    Pandora Faves

    Back on the market, price reduced, 1% cash back rebate offered

    Sheree Dutton | Ready Real Estate | 817-975-0461
    222 Birchwood, Azle, TX
    Back on the market, price reduced and 15 cash back rebate offered!
    3BR/2BA Single Family House
    offered at $102,500
    Year Built 2006
    Sq Footage 1,142
    Bedrooms 3
    Bathrooms 2 full, 0 partial
    Floors 1
    Parking 3 Covered spaces
    Lot Size .225 acres
    HOA/Maint $0 per month

    DESCRIPTION


    Wow, talk about pride of ownership! This house has too many upgrades to count, and is so well cared for. You must see it to believe it! A lot of value in this perfect starter home.

    OPEN HOUSE SUNDAY MAY 3RD 2+5 pm

    see additional photos below
    PROPERTY FEATURES

    - Central A/C - Central heat - Fireplace
    - High/Vaulted ceiling - Walk-in closet - Tile floor
    - Living room - Breakfast nook - Dishwasher
    - Refrigerator - Stove/Oven - Microwave
    - Laundry area - inside - Balcony, Deck, or Patio - Yard

    OTHER SPECIAL FEATURES

    - 1 car garage, covered carport for 2 cars
    - covered wood deck in backyard
    - gutters
    - storage shed
    - newly stained wood fence
    - electric fireplace added, with tile hearth
    - upgraded ceiling fans and light fixtures
    - island in kitchen

    ADDITIONAL PHOTOS


    Fantastic curb appeal

    covered wood deck in back

    living room

    kitchen with island

    breakfast nook

    master bedroom
    Contact info:
    Sheree Dutton
    Ready Real Estate
    817-975-0461
    For sale by agent/broker

    powered by postlets Equal Opportunity Housing
    Posted: Sep 11, 2009, 7:31am PDT

    Blog Archive