Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le janvier 24, 2013, 18:51:13

Titre: [SecList]Analysis: ?Red October?. Detailed Malware Description 4. Second Stage of Attack
Posté par: igor51 le janvier 24, 2013, 18:51:13

Analysis: ?Red October?. Detailed Malware Description 4. Second Stage of Attack

Files with the extension ".bak" are treated differently. They are decrypted using a custom AMPRNG algorithm with a hardcoded key, then decompressed using LZMA
Source: Analysis: ?Red October?. Detailed Malware Description 4. Second Stage of Attack (http://www.securelist.com/en/analysis/204792273/Red_October_Detailed_Malware_Description_4_Second_Stage_of_Attack)