【インディケータ情報】
■ハッシュ情報(Sha256) - CobaltStrike/QuasarRAT(APT10) -
6dfd2ddcb4bae98db3f77c96039596dd99a1593b379dd4d5b1efcf25484a3f52
70d44165f308acccfa77bfb60a7592fdd38c03e2a403745effec31e3fffdc3e4
e526d74e9a0ff7d6915c6bbce2a703d5feacaefc2aca88dff31a664472418f9b
d0effd3711e753fe5b14bd93be4b7b8fd95c87dce03f51cd5038d3d743fced40
66bbeeec7eb98c3e4b8180b8caf3285f6c5f86e883b608087b4c19d6c9d94cd0
28e471b40d54d397dbacc2555abe94e0a0c8285bdfd78980af21882ac482135b
2accb69d13ae8e05fd95fdde86d8841b10fff35732fe11232e21f80713d6027d
(以上は Macnica Networks の情報: 引用元は https://www.macnica.net/file/mpressioncss_2018-1h-report_mnc_rev3_nopw.pdf )
【検索】
google: 6dfd2ddcb4bae98db3f77c96039596dd99a1593b379dd4d5b1efcf25484a3f52
google: 70d44165f308acccfa77bfb60a7592fdd38c03e2a403745effec31e3fffdc3e4
google: e526d74e9a0ff7d6915c6bbce2a703d5feacaefc2aca88dff31a664472418f9b
google: d0effd3711e753fe5b14bd93be4b7b8fd95c87dce03f51cd5038d3d743fced40
google: 66bbeeec7eb98c3e4b8180b8caf3285f6c5f86e883b608087b4c19d6c9d94cd0
google: 28e471b40d54d397dbacc2555abe94e0a0c8285bdfd78980af21882ac482135b
google: 2accb69d13ae8e05fd95fdde86d8841b10fff35732fe11232e21f80713d6027d
【VT検索】
https://www.virustotal.com/gui/file/6dfd2ddcb4bae98db3f77c96039596dd99a1593b379dd4d5b1efcf25484a3f52
https://www.virustotal.com/gui/file/70d44165f308acccfa77bfb60a7592fdd38c03e2a403745effec31e3fffdc3e4
https://www.virustotal.com/gui/file/e526d74e9a0ff7d6915c6bbce2a703d5feacaefc2aca88dff31a664472418f9b
https://www.virustotal.com/gui/file/d0effd3711e753fe5b14bd93be4b7b8fd95c87dce03f51cd5038d3d743fced40
https://www.virustotal.com/gui/file/66bbeeec7eb98c3e4b8180b8caf3285f6c5f86e883b608087b4c19d6c9d94cd0
https://www.virustotal.com/gui/file/28e471b40d54d397dbacc2555abe94e0a0c8285bdfd78980af21882ac482135b
https://www.virustotal.com/gui/file/2accb69d13ae8e05fd95fdde86d8841b10fff35732fe11232e21f80713d6027d
【資料】
◆日本を狙うサイバーエスピオナージ (標的型攻撃)の動向 2018 年上半期 (Macnica Networks, 2018/10/01)
https://www.macnica.net/file/mpressioncss_2018-1h-report_mnc_rev3_nopw.pdf
⇒ https://malware-log.hatenablog.com/entry/2018/10/01/000000_7
