MHL put up a SpyEye memory sample on the FAQ wiki
(
http://code.google.com/p/volatility/wiki/FAQ#Are_there_any_public_memory_sa…)
earlier that might be of interest:
http://code.google.com/p/malwarecookbook/source/browse/trunk/spyeye.vmem.zip
On Wed, Feb 29, 2012 at 12:24 PM, Mike Lambert <dragonforen(a)hotmail.com> wrote:
Does anyone have any strings unique for the new SpyEye
mentioned in this
article?
http://redtape.msnbc.msn.com/_news/2012/01/06/9986119-new-virus-raids-your-…
If you have a memory image with this trojan, could you share it with me?
Mike Lambert
michael-lambert.us
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
--
PGP Fingerprint: 2E87 17A1 EC10 1E3E 11D3 64C2 196B 2AB5 27A4 AC92