resumesummit

#spy #agent #rootkit
http://ozkngbvcs.bkt.gdipper.com/OnlineInstaller.exe
http://ozkngbvcs.bkt.gdipper.com/OnlineInstaller.exe
-->
-> f0cd60cdaa230d2a98143a373eb35d4f5a390a742360cf3b01cbaf8716a32e8a
-> 3f11ea10cb7dc4ed8e22de64e9218b1c481beb8b6f4bf0c1ba6b021e9e3f6f72
-> 768ee306fea9654db91ec3d9df65d07ad5b05aa732a434f1fc3d757c1415bd74
-> bd43289d2e616c78c9d5807b6c2f57028cd3d23aebc4111d7d689493b8c8c87a

-> http://iostream.system.band/dump/io/time.php
104.28.20.204:80 iostream.system.band/dump/io/time.php
104.28.20.204:80 (TCP) 	A Network Trojan was detected 	ETPRO TROJAN Colony Rootkit Downloader CnC Checkin
-->
http://ozkngbvcs.bkt.gdipper.com/w764/aXXXX
-> 858c24d18ce0fb0936d3190dd4a2692726bf5b316666cabc050bc4c484f8f995
http://ozkngbvcs.bkt.gdipper.com/w764/mXXXX
-> c11266f778eb7743afe7aabebaa475efc917a041017ef6da81278d390b494977
http://ozkngbvcs.bkt.gdipper.com/w732/mXXXX
-> e5393a292593e1adcc3bbaa2a08b6a13cd3c513eea9812e8e2594c550fea0405
http://ozkngbvcs.bkt.gdipper.com/w732/aXXXX
-> 858c24d18ce0fb0936d3190dd4a2692726bf5b316666cabc050bc4c484f8f995
http://ozkngbvcs.bkt.gdipper.com/xp/aXXXX
-> 146aa703827f7f787facd63c5cec7b9f885282729a7b03e4a4c42b3706da5ab7
http://ozkngbvcs.bkt.gdipper.com/xp/mXXXX
-> 396f921a10745004499094181deccefcb5c5530fc606821bce806cea5f870cad
-> e5393a292593e1adcc3bbaa2a08b6a13cd3c513eea9812e8e2594c550fea0405

---->
coinminer http://ozkngbvcs.bkt.gdipper.com/lastupdate.exe
-> 0ec4e6d8b5d86d04b668d987b894801c74799f6bcfbd43ddd79ae25eeb545f2a
amdfx_sys
-> a61645d6e073d35296dd309e094fe235a14df265b59119e04afcff78726f94b1