PRB-Backdoor - A Fully Loaded PowerShell Backdoor with Evil Intentions - A Study
In Summary : The great people at ClearSky reached out to me a couple of days ago regarding a sample that they suspected could be relate...
https://updatesinfosec.blogspot.com/2018/05/prb-backdoor-fully-loaded-powershell.html
In Summary :
The great people at ClearSky reached out to me a couple of days ago regarding a sample that they suspected could be related to MuddyWater.They suspected so because the sample had some similarities with the way MuddyWater lures look like and some similarities in some PowerShell obfuscation, in specific the character substitution routine. [...]
kindly refer the following link as follow up :
https://ift.tt/2Kjljbr
The great people at ClearSky reached out to me a couple of days ago regarding a sample that they suspected could be related to MuddyWater.They suspected so because the sample had some similarities with the way MuddyWater lures look like and some similarities in some PowerShell obfuscation, in specific the character substitution routine. [...]
kindly refer the following link as follow up :
https://ift.tt/2Kjljbr
