Security-X
Forum Security-X => News => Discussion démarrée par: igor51 le mars 24, 2017, 05:00:38
-
Reverse engineering DUBNIUM –Stage 2 payload analysis
Recently, we blogged about the basic functionality and features of the DUBNIUM advanced persistent threat (APT) activity group Stage 1 binary and Adobe Flash exploit used during the December 2015 incident (Part 1, Part 2). In this blog, we will go through the overall infection chain structure and the Stage 2 executable details. Stage 2 executables...
Source: Reverse engineering DUBNIUM –Stage 2 payload analysis (https://blogs.technet.microsoft.com/mmpc/2016/07/14/reverse-engineering-dubnium-stage-2-payload-analysis/)