SHOW:
|
|
- or go back to the newest paste.
| 1 | - | [] |
| 1 | + | [Comnie 05062018] |
| 2 | == | |
| 3 | ||
| 4 | - | [][1] |
| 4 | + | [https://app.any.run/tasks/e9a9a5a8-185b-42a3-a756-79d68d814e2e][1] |
| 5 | - | [1]: |
| 5 | + | [1]:https://app.any.run/tasks/e9a9a5a8-185b-42a3-a756-79d68d814e2e |
| 6 | ||
| 7 | - | [] |
| 7 | + | [Background info] |
| 8 | -- | |
| 9 | https://researchcenter.paloaltonetworks.com/2018/01/unit42-comnie-continues-target-organizations-east-asia/ | |
| 10 | ||
| 11 | [Comnie C2] | |
| 12 | -- | |
| 13 | https://gosparklyfan.tumblr.com/ | |
| 14 | https://sosswi2009.wordpress.com/ | |
| 15 | http://115.144.238.40:8080/NgAqPxDsEdDlVmUtCgEsCgWt.asp?pid=/F4jo40t3N9/g4+zP2Ceuy7BdchyPP== | |
| 16 | ||
| 17 | [Comnie persistence] | |
| 18 | -- | |
| 19 | LNK | |
| 20 | CommandLineArguments: "C:\Users\admin\AppData\Local\Temp\proxyconf.dll",Sd | |
| 21 | WorkingDirectory: C:\Users\admin\AppData\Local\Temp | |
| 22 | RelativePath: ..\..\..\..\..\..\..\..\..\Windows\system32\rundll32.exe | |
| 23 | Description: Conime | |
| 24 | ||
| 25 | *** | |
| 26 | ![Pastebin Logo][image] | |
| 27 | ||
| 28 | [image]: https://zerophagemalware.files.wordpress.com/2017/09/zerophageicon2.png |
