valitydev/signature-base
14
0
Fork 0
mirror of https://github.com/valitydev/signature-base.git synced 2024-11-06 18:15:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Turla Outlook Backdoor Filename IOCs

Browse Source 
https://www.welivesecurity.com/2018/08/22/turla-unique-outlook-backdoor/
This commit is contained in:
Florian Roth 2018-08-22 15:42:31 +02:00
parent 5bffe6fdc3
commit 479f69360c
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
iocs/filename-iocs.txt
View File

@ -3053,4 +3053,11 @@ ystem32\\Microsoft\\Protect\\Windows\\svchost.exe;80
# Insikt Report https://www.recordedfuture.com/chinese-cyberespionage-operations/
/usr/bin/ext4;70
# Turla Outlook Backdoor https://www.welivesecurity.com/2018/08/22/turla-unique-outlook-backdoor/
\\Microsoft\\Windows\\scawrdot\.db;100
\\Microsoft\\Windows\\flobcsnd\.dat;100
\\mapid\.tlb;60
\\cbmsfgrc\.dat;60
\\mswmpdat\.tlb;60
# End