http://xiongmao-shaoxiang.virus/payload.exe
熊猫烧香 v2.0 — ACTIVE INFECTION
熊猫烧香 熊猫烧香
earn passive income while your files burn
ENCRYPTING /windows/system32/ 0%
SPREADING VIA USB / LAN 0%
OVERWRITING BOOT SECTOR 0%
CA ADDRESS 0x99d3675c7ab241e981c7fc1dc986608eccd97777:
🐼
PAYLOAD STATUS
FILES INFECTED 0
EXE OVERWRITTEN 0
PANDA DRAWN YES
STATUS SPREADING
// INFECTED FILES — LIVE FEED
explorer.exeENCRYPTING...
regedit.exeOVERWRITTEN
notepad.exePENDING
your_files.zipQUEUED
winlogon.exeSCANNING...