View source for Sinowal analysis (Windows 7, 32-bit)

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://www.evild3ad.com/?p=1556 www.evild3ad.com
|Author=evild3ad, 
|NomRevue=
|Date=March 3, 2012
|Editor=evild3ad.com
|Year=2012
|ISBN=
|Page=
|Abstract=Sinowal (also known as Torpig or Anserin) is constant one of the top banking trojan all over the world since 2006. So I asked myself, why is there so little info on the web? Just found old articles, that’s why I decided to take a new look at Sinowal.

Sinowal is a spyware trojan that can be used to perform post-authentication man-in-the-middle (MitM) content-manipulation attacks, a fancy way of saying that it can change basically anything sent or received between your browser and any web server in any HTTP session, even those encrypted by TLS/SSL. It’s also been incorporated with a boot sector rootkit known as Mebroot (MAOS).
|Botnet=Torpig, 
|Malware=Sinowal, Mebroot, 
|CCProtocol=, 
|Operation=, 
|Keyword=, 
}}