[13441] 2018-11-20_赛门铁克发现朝鲜APT组织Lazarus攻击金融机构的关键性工具

文档创建者:s7ckTeam
浏览次数:6
最后更新:2025-01-18
2018-11-20_赛门铁克发现朝鲜APT组织Lazarus攻击金融机构的关键性工具 A P T L a z a r u s c l o u d s   F r e e B u f   2 0 1 8 - 1 1 - 2 0 1 0 2 D H S U S - C E R T A P T L a z a r u s H i d d e n   C o b r a D H S D o T F B I L a z a r u s A T M I O C s D H S L a z a r u s F A S T C a s h 1 0 8 S y m a n t c L a z a r u s F A S T C a s h 2 0 1 4 L a z a r u s 8 1 0 0 W a n n a C r y D H S L a z a r u s F A S T C a s h L a z a r u s F A S T C a s h A T M   -   ( T r o j a n . F a s t c a s h )   L a z a r u s A T M A T M U S - C E R T L a z a r u s 2 0 1 7 3 0 A T M 2 0 1 8 L a z a r u s 2 3 A T M
L a z a r u s F A S T C a s h A T M L a z a r u s A T M A d v a n c e d   I n t e r a c t i v e   e X e c u t i v e ,   A I X A I X I S O   8 5 8 3 I S O 8 5 8 3 L a z a r u s I S O   8 5 8 3 L a z a r u s 使 I S O 8 5 8 3   I S O   使 A T M T r o j a n . F a s t c a s h 1 2
F A S T C a s h T r o j a n . F a s t c a s h A T M   I S O   8 5 8 3 P r i m a r y A c c o u n t   N u m b e r P A N T r o j a n . F a s t c a s h L a z a r u s T r o j a n . F a s t c a s h A T M L a z a r u s A T M T r o j a n . F a s t c a s h I S O 8 5 8 3   = =   2 0 0 A T M P O S 9 0 T r o j a n . F a s t c a s h I f   P r o c e s s i n g   C o d e   s t a r t s   w i t h   3   ( B a l a n c e   I n q u i r y ) : O t h e r w i s e ,   i f   t h e   P r i m a r y   A c c o u n t   N u m b e r   i s   B l a c k l i s t e d   b y   A t t a c k e r s A l l   o t h e r   P r o c e s s i n g   C o d e s   ( w i t h   n o n - b l a c k l i s t e d   P A N s ) : F a l s e T r o j a n . F a s t c a s h 使 L a z a r u s F A S T C a s h P A N U S - C E R T F A S T C a s h A I X L a z a r u s F A S T C a s h L a z a r u s 2 0 1 6 F A S T C a s h L a z a r u s L a z a r u s       R e s p o n s e   C o d e   =   0 0   ( A p p r o v e d )         R e s p o n s e   C o d e   =   5 5     ( I n v a l i d   P I N )         R e s p o n s e   C o d e   =   0 0   ( A p p r o v e d )
1 2 3 A I X I o C D 4 6 5 6 3 7 5 1 8 0 2 4 2 6 2 C 0 6 3 F 4 A 8 2 D 7 9 9 A 4 E 4 0 F F 3 3 8 1 0 1 4 9 7 2 F 2 4 E A 1 8 B C 2 3 C 3 B 2 7 E E   ( T r o j a n . F a s t c a s h I n j e c t o r ) C A 9 A B 4 8 D 2 9 3 C C 8 4 0 9 2 E 8 D B 8 F 0 C A 9 9 C B 1 5 5 B 3 0 C 6 1 D 3 2 A 1 D A 7 C D 3 6 8 7 D E 4 5 4 F E 8 6 C   ( T r o j a n . F a s t c a s h D L L ) 1 0 A C 3 1 2 C 8 D D 0 2 E 4 1 7 D D 2 4 D 5 3 C 9 9 5 2 5 C 2 9 D 7 4 D C B C 8 4 7 3 0 3 5 1 A D 7 A 4 E 0 A 4 B 1 A 0 E B A   ( T r o j a n . F a s t c a s h D L L ) 3 A 5 B A 4 4 F 1 4 0 8 2 1 8 4 9 D E 2 D 8 2 D 5 A 1 3 7 C 3 B B 5 A 7 3 6 1 3 0 D D D B 8 6 B 2 9 6 D 9 4 E 6 B 4 2 1 5 9 4 C   ( T r o j a n . F a s t c a s h D L L ) * s y m a n t e c c l o u d s F r e e B u f . C O M
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则