【ブログ】
◆8つの脆弱性を利用し仮想通貨発掘ツールを送り込むワーム「BlackSquid」を確認 (Trendmicro, 2019/06/10)
https://blog.trendmicro.co.jp/archives/21521
【関連まとめ記事】
◆全体まとめ
◆マルウェア / Malware (まとめ)
◆マイニングマルウェア (まとめ)
◆XMRig (まとめ)
https://malware-log.hatenablog.com/entry/XMRig
【インディケータ情報】
■ハッシュ情報(Sha256) - BlackSquid -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(以上は Terndmicro の情報: 引用元は https://blog.trendmicro.co.jp/wp-content/uploads/2019/06/BlackSquid-Slithers-Into-Servers-and-Drives-With-8-Notorious-Exploits-to-Drop-XMRig-Miner.pdf )
【検索】
google: 14f8dc79113b6a2d3f378d2046dbc4a9a7c605ce24cfa5ef9f4e8f5406cfd84d
google: 3596e8fa5e19e860a2029fa4ab7a4f95fadf073feb88e4f82b19a093e1e2737c
google: 4bc1a84ddbbb360e3026e8ec1d0e1eff02a100cf01888e7e2a2ac6a105c71450
google: aa259b168ec448349e91a9d560569bdb6fabd811d78888c6080065a549f60cb0
google: 4abb241a957061d150d757955aa0e7159253b17a1248eaac13490a811cdabf90
google: 515caf6b7ff41322099f4c3e3d4846a65768b7f4b3166274afc47cb301eeda98
google: 8dbd331784e620bb0ca33b8515ca9df9a7a049057b39a2da5242323943d730b4
google: 8974da4d200f3ca11aa0bc800f23d7a2be9a3e4e6311221888740c812d489116
【VT検索】
https://www.virustotal.com/gui/file/14f8dc79113b6a2d3f378d2046dbc4a9a7c605ce24cfa5ef9f4e8f5406cfd84d
https://www.virustotal.com/gui/file/3596e8fa5e19e860a2029fa4ab7a4f95fadf073feb88e4f82b19a093e1e2737c
https://www.virustotal.com/gui/file/4bc1a84ddbbb360e3026e8ec1d0e1eff02a100cf01888e7e2a2ac6a105c71450
https://www.virustotal.com/gui/file/aa259b168ec448349e91a9d560569bdb6fabd811d78888c6080065a549f60cb0
https://www.virustotal.com/gui/file/4abb241a957061d150d757955aa0e7159253b17a1248eaac13490a811cdabf90
https://www.virustotal.com/gui/file/515caf6b7ff41322099f4c3e3d4846a65768b7f4b3166274afc47cb301eeda98
https://www.virustotal.com/gui/file/8dbd331784e620bb0ca33b8515ca9df9a7a049057b39a2da5242323943d730b4
https://www.virustotal.com/gui/file/8974da4d200f3ca11aa0bc800f23d7a2be9a3e4e6311221888740c812d489116
