【資料】
◆KillDisk and BlackEnergy Are Not Just Energy Sector Threats (Trendmicro, 2016/02)
http://documents.trendmicro.com/assets/resources/IOC-KillDisk_and_BlackEnergy.pdf
【インディケータ情報】
■ハッシュ情報(MD5)
- 3e49e0dd526eccfad15273acf50a8270
出典: http://documents.trendmicro.com/assets/resources/IOC-KillDisk_and_BlackEnergy.pdf
■ハッシュ情報(Sha1)
- 01684e1ee4af38bb28ef6a4bea1da8d14f1c472d
- 058257111cd1addf0481c23ae75861a0004e90ea
- 069163e1fb606c6178e23066e0ac7b7f0e18506b
- 0b4be96ada3b54453bd37130087618ea90168d72
- 11c911c7e52c127de83bfa9e7f9c050951a7553c
- 166d71c63d0eb609c4f77499112965db7d9a51bb
- 16f44fac7e8bc94eccd7ad9692e6665ef540eec4
- 16f44fac7e8bc94eccd7ad9692e6665ef540eec4
- 1a716bf5532c13fa0dc407d00acdc4a457fa87cd
- 1a86f7ef10849da7d36ca27d0c9b1d686768e177
- 1cbe4e22b034ee8ea8567e3f8eb9426b30d4affe
- 20901cc767055f29ca3b676550164a66f85e2a42
- 2c1260fd5ceaef3b5cb11d702edc4cdd1610c2ed
- 2d805bca41aa0eb1fc7ec3bd944efd7dba686ae1
- 30abab134ffced96d9c1191da46dbc9ae4170022
- 31591ef60155fff5164f9a6eaf442b998be6e577
- 3298dcea06a4c7f745a932c72ffe0741e9a3a49e
- 345881fc59b28b9ef74367811e151434be927a09
- 3a1a932ea1a95b8bc33dacaf2b2aaa764c105881
- 49af5fc6fb614131bd446f3ed9f33568ea04659f
- 4bc2bbd1809c8b66eecd7c28ac319b948577de7b
- 4c424d5c8cfedf8d2164b9f833f7c631f94c5a4c
- 502bd7662a553397bbdcfa27b585d740a20c49fc
- 53bb81ab4b3029a76a483d742749ef706a521167
- 606573cd1dee5caf1e11d73a9d3f4068680aaf1a
- 672f5f332a6303080d807200a7f258c8155c54af
- 6d6ba221da5b1ae1e910bbeaa07bd44aff26a7c0
- 6d6ba221da5b1ae1e910bbeaa07bd44aff26a7c0
- 6e49bc82f8eb5ef5380aad1e7115c7e167c6b878
- 72d0b326410e1d0705281fde83cb7c33c67bc8ca
- 84248bc0ac1f2f42a41cfffa70b21b347ddc70e9
- 896fcacff6310bbe5335677e99e4c3d370f73d96
- 899baab61f32c68cde98db9d980cd4fe39edd572
- 8ad6f88c5813c2b4cd7abab1d6c056d95d6ac569
- 8ad6f88c5813c2b4cd7abab1d6c056d95d6ac569
- 8c26c70fbffe7f250aaff234be9a014a996930bc
- a427b264c1bd2712d1178912753bac051a7a2f6c
- a6dcca175949ba91ea95ffa6148bdad41f60bf0e
- a9aca6f541555619159640d3ebc570cdcdce0a0d
- aa67ca4fb712374f5301d1d2bab0ac66107a4df1
- b05e577e002c510e7ab11b996a1cd8fe8fdada0c
- bd87cf5b66e36506f1d6774fd40c2c92a196e278
- be319672a87d0dd1f055ad1221b6ffd8c226a6e2
- c7081b80d0e165cb0a732851f4355f17bbd5e250
- c7e919622d6d8ea2491ed392a0f8457e4483eae9
- cd07036416b3a344a34f4571ce6a1df3cbb5783f
- d91e6bb091551e773b3933be5985f91711d6ac3b
- e1c2b28e6a35aeadb508c60a9d09ab7b1041afb8
- e40f0d402fdcba6dd7467c1366d040b02a44628c
- e5a2204f085c07250da07d71cb4e48769328d7dc
- f3e41eb94c4d72a98cd743bbb02d248f510ad925
- f3e41eb94c4d72a98cd743bbb02d248f510ad925
- fe8197008ddb257f79609f29de8c7e4404dd5dd9
出典: http://documents.trendmicro.com/assets/resources/IOC-KillDisk_and_BlackEnergy.pdf
■IPアドレス(C&Cサーバ)
- 2.61.168.116
- 5.149.254.114
- 5.9.32.230
- 31.210.111.154
- 88.198.25.92
- 94.158.214.45
- 146.0.74.7
- 188.40.8.72
- 148.251.82.21
出典: http://documents.trendmicro.com/assets/resources/IOC-KillDisk_and_BlackEnergy.pdf
■URL(C&Cサーバ)
5.9.32.230/Microsoft/Update/KS1945777.php
5.149.254.114/Microsoft/Update/KC074913.php
31.210.111.154/Microsoft/Update/KS081274.php
88.198.25.92/fHKfvEhleQ/maincraft/derstatus.php
146.0.74.7/l7vogLG/BVZ99/rt170v/solocVI/eegL7p.php
148.251.82.21/Microsoft/Update/KS4567890.php
188.40.8.72/l7vogLG/BVZ99/rt170v/solocVI/eegL7p.php出典: http://documents.trendmicro.com/assets/resources/IOC-KillDisk_and_BlackEnergy.pdf
