« previous next »
Pages: [1]   Go Down

Author Topic: Malware.QVM23.Gen not detected? error page given now?  (Read 956 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33920
  • malware fighter
Malware.QVM23.Gen not detected? error page given now?
« on: November 23, 2014, 05:30:17 PM »
See: https://www.virustotal.com/nl/url/3cfc800ddf5a58ee652d651b716f3be8c114ac0b7607583f78ad0d942c9267f1/analysis/1416759120/
and https://www.virustotal.com/nl/file/482c8740c045ceb5dfaaf6aa30058c32ee02eacfe19df6b0e3c11fb7801e82f9/analysis/1416759291/
Quttera gives as blacklisted: List of blacklisted external links: 28
On extended  validation: apk.hiapk dot com//search?key%3D%e7%99%be%e5%ba%a6%e9%9f%b3%e4%b9%90%e6%92%ad%e6%94%be%e5%99%a8

Sucuri misses detection: http://sitecheck.sucuri.net/results/apk.hiapk.com

Dom XSS vuln: Results from scanning URL: htxp://apk.hiapk.com/js/lib/RequireConfig.js (for: this.modal.innerHTML='<iframe)
Number of sources found: 35
Number of sinks found: 5

XSS bypass exploit: http://www.cvedetails.com/vulnerability-list/vendor_id-45/product_id-5531/Apache-Coyote-Http-Connector.html

Landed here: http://apk.hiapk.com/errorpage/500.html

Detection is an Adware Agent detection, but also could be a FP.

pol
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »