【インディケータ情報】
■ハッシュ情報(Sha256)
| f37b1bbf5a07759f10e0298b861b354cee13f325bc76fbddfaacd1ea7505e111 | Clayslide |
| 2fc7810a316863a5a5076bf3078ac6fad246bc8773a5fb835e0993609e5bb62e | ALMA Communicator |
| 2d6f06d8ee0da16d2335f26eb18cd1f620c4db3e880efa6a5999eff53b12415c | Mimikatz |
【ブログ】
◆OilRig Deploys “ALMA Communicator” – DNS Tunneling Trojan (paloalto, 2017/11/08 13:00)
https://researchcenter.paloaltonetworks.com/2017/11/unit42-oilrig-deploys-alma-communicator-dns-tunneling-trojan/
