【公開情報】
◆Darkhotel組織の侵入隔離ネットワークのRamsayコンポーネント分析 (Antiy, 2021/05/22)
https://www.antiy.cn/research/notice&report/research_report/20200522.html
【関連まとめ記事】
◆全体まとめ
◆攻撃組織 / Actor (まとめ)
◆標的型攻撃組織 / APT (まとめ)
◆Darkhotel (まとめ)
https://malware-log.hatenablog.com/entry/DarkHotel
【インディケータ情報】
■ハッシュ情報(MD5) - Darkhotel -
03BD34A9BA4890F37AC8FED78FEAC199
07858D5562766D8239A7C961FEEA087C
08943BB237926DD1376D799A4AFE797D
0B04998EEB9FB22429A04E3D0E134548
186B2E42DE0D2E58D070313BD6730243
1F3606DDA801A6B7E6BD7CC0E8994241
25877AA787B213C67854A08452CDFC5B
3439318CEDCF37C1BF5FE6D49DDBB2CB
359D2D301455A95F8A2655965B386278
3654C3FA86F19D253E4C70BDF5F3D158
3E805824F80BBA35AC06EAFC80C6B6AD
4A52DB18E3618F79983F0CB1DD83F34A
4FA4C81A7D1B945B36403DC95943F01E
4FA4C81A7D1B945B36403DC95943F01E
52E32DE77509DCB406DA3B81FB9055D7
53984EF18C965B49EEB3686460AD540B
5D0FAA109DCFDA31AC2D493631E606C2
5F564A755100D63B9C6374DABD1E5321
615A0F818DC0DED2F138D6B3B2DFD6E5
6E47F8BE989792800C019BC24DFB1A25
74805C5477DA842EB0798B95324F3A65
7A5503B148E3A1D88BA9E07D95166159
7E4572DB796E27848D23EA5D1E8604AA
8413AB4D5A950F81B40CEEBC3F1E7273
8AA069860D591119AF2859856AD5F063
B2B51A85BDAD70FF19534CD013C07F24
BB72720BC4583C6C4C3CAA883A7DEC95
C2ADF8BF8D8E4409A4725D0334ED8AA6
CC4503B59BABD2E07CF278FF11CE99C7
CF133C06180F130C471C95B3A4EBD7A5
D0EAD87212B0573447F573639DA49FF8
EEA409BBEFEE23EB475E4161F06D529A
F028D23CB4EA2C5DCF0A2B6BCAADA0C0
A211C80068304FB4A9ACD7AB13720D55
AA6BB52BD5E3D8B21C113E5AB1A240EA
BB72720BC4583C6C4C3CAA883A7DEC95
C803D412A5E86FA8DE111B77F2A14523
DC0222F1E0868C3612A93BA2D83B99BE
E48B89715BF5E4C55EB5A1FED67865D9
E61BA12C33DB1696715401D8FD0BAAE9
F17D7098BDE0B29441BFCD797812CF88
FF5D43B210545F931AE80A847D1789BB
(以上は Antiy の情報: 引用元は https://www.antiy.cn/research/notice&report/research_report/20200522.html )
■FQDN情報 - Darkhotel -
service-security-manager.com
find-image.com
win-api-essentials.com
service.email-126.net
service.email-126.net
(以上は Antiy の情報: 引用元は https://www.antiy.cn/research/notice&report/research_report/20200522.html )
【検索】
google: 03BD34A9BA4890F37AC8FED78FEAC199
google: 07858D5562766D8239A7C961FEEA087C
google: 08943BB237926DD1376D799A4AFE797D
google: 0B04998EEB9FB22429A04E3D0E134548
google: 186B2E42DE0D2E58D070313BD6730243
google: 1F3606DDA801A6B7E6BD7CC0E8994241
google: 25877AA787B213C67854A08452CDFC5B
google: 3439318CEDCF37C1BF5FE6D49DDBB2CB
google: 359D2D301455A95F8A2655965B386278
google: 3654C3FA86F19D253E4C70BDF5F3D158
google: 3E805824F80BBA35AC06EAFC80C6B6AD
google: 4A52DB18E3618F79983F0CB1DD83F34A
google: 4FA4C81A7D1B945B36403DC95943F01E
google: 4FA4C81A7D1B945B36403DC95943F01E
google: 52E32DE77509DCB406DA3B81FB9055D7
google: 53984EF18C965B49EEB3686460AD540B
google: 5D0FAA109DCFDA31AC2D493631E606C2
google: 5F564A755100D63B9C6374DABD1E5321
google: 615A0F818DC0DED2F138D6B3B2DFD6E5
google: 6E47F8BE989792800C019BC24DFB1A25
google: 74805C5477DA842EB0798B95324F3A65
google: 7A5503B148E3A1D88BA9E07D95166159
google: 7E4572DB796E27848D23EA5D1E8604AA
google: 8413AB4D5A950F81B40CEEBC3F1E7273
google: 8AA069860D591119AF2859856AD5F063
google: B2B51A85BDAD70FF19534CD013C07F24
google: BB72720BC4583C6C4C3CAA883A7DEC95
google: C2ADF8BF8D8E4409A4725D0334ED8AA6
google: CC4503B59BABD2E07CF278FF11CE99C7
google: CF133C06180F130C471C95B3A4EBD7A5
google: D0EAD87212B0573447F573639DA49FF8
google: EEA409BBEFEE23EB475E4161F06D529A
google: F028D23CB4EA2C5DCF0A2B6BCAADA0C0
google: A211C80068304FB4A9ACD7AB13720D55
google: AA6BB52BD5E3D8B21C113E5AB1A240EA
google: BB72720BC4583C6C4C3CAA883A7DEC95
google: C803D412A5E86FA8DE111B77F2A14523
google: DC0222F1E0868C3612A93BA2D83B99BE
google: E48B89715BF5E4C55EB5A1FED67865D9
google: E61BA12C33DB1696715401D8FD0BAAE9
google: F17D7098BDE0B29441BFCD797812CF88
google: FF5D43B210545F931AE80A847D1789BB
【VT検索】
https://www.virustotal.com/gui/file/03BD34A9BA4890F37AC8FED78FEAC199
https://www.virustotal.com/gui/file/07858D5562766D8239A7C961FEEA087C
https://www.virustotal.com/gui/file/08943BB237926DD1376D799A4AFE797D
https://www.virustotal.com/gui/file/0B04998EEB9FB22429A04E3D0E134548
https://www.virustotal.com/gui/file/186B2E42DE0D2E58D070313BD6730243
https://www.virustotal.com/gui/file/1F3606DDA801A6B7E6BD7CC0E8994241
https://www.virustotal.com/gui/file/25877AA787B213C67854A08452CDFC5B
https://www.virustotal.com/gui/file/3439318CEDCF37C1BF5FE6D49DDBB2CB
https://www.virustotal.com/gui/file/359D2D301455A95F8A2655965B386278
https://www.virustotal.com/gui/file/3654C3FA86F19D253E4C70BDF5F3D158
https://www.virustotal.com/gui/file/3E805824F80BBA35AC06EAFC80C6B6AD
https://www.virustotal.com/gui/file/4A52DB18E3618F79983F0CB1DD83F34A
https://www.virustotal.com/gui/file/4FA4C81A7D1B945B36403DC95943F01E
https://www.virustotal.com/gui/file/4FA4C81A7D1B945B36403DC95943F01E
https://www.virustotal.com/gui/file/52E32DE77509DCB406DA3B81FB9055D7
https://www.virustotal.com/gui/file/53984EF18C965B49EEB3686460AD540B
https://www.virustotal.com/gui/file/5D0FAA109DCFDA31AC2D493631E606C2
https://www.virustotal.com/gui/file/5F564A755100D63B9C6374DABD1E5321
https://www.virustotal.com/gui/file/615A0F818DC0DED2F138D6B3B2DFD6E5
https://www.virustotal.com/gui/file/6E47F8BE989792800C019BC24DFB1A25
https://www.virustotal.com/gui/file/74805C5477DA842EB0798B95324F3A65
https://www.virustotal.com/gui/file/7A5503B148E3A1D88BA9E07D95166159
https://www.virustotal.com/gui/file/7E4572DB796E27848D23EA5D1E8604AA
https://www.virustotal.com/gui/file/8413AB4D5A950F81B40CEEBC3F1E7273
https://www.virustotal.com/gui/file/8AA069860D591119AF2859856AD5F063
https://www.virustotal.com/gui/file/B2B51A85BDAD70FF19534CD013C07F24
https://www.virustotal.com/gui/file/BB72720BC4583C6C4C3CAA883A7DEC95
https://www.virustotal.com/gui/file/C2ADF8BF8D8E4409A4725D0334ED8AA6
https://www.virustotal.com/gui/file/CC4503B59BABD2E07CF278FF11CE99C7
https://www.virustotal.com/gui/file/CF133C06180F130C471C95B3A4EBD7A5
https://www.virustotal.com/gui/file/D0EAD87212B0573447F573639DA49FF8
https://www.virustotal.com/gui/file/EEA409BBEFEE23EB475E4161F06D529A
https://www.virustotal.com/gui/file/F028D23CB4EA2C5DCF0A2B6BCAADA0C0
https://www.virustotal.com/gui/file/A211C80068304FB4A9ACD7AB13720D55
https://www.virustotal.com/gui/file/AA6BB52BD5E3D8B21C113E5AB1A240EA
https://www.virustotal.com/gui/file/BB72720BC4583C6C4C3CAA883A7DEC95
https://www.virustotal.com/gui/file/C803D412A5E86FA8DE111B77F2A14523
https://www.virustotal.com/gui/file/DC0222F1E0868C3612A93BA2D83B99BE
https://www.virustotal.com/gui/file/E48B89715BF5E4C55EB5A1FED67865D9
https://www.virustotal.com/gui/file/E61BA12C33DB1696715401D8FD0BAAE9
https://www.virustotal.com/gui/file/F17D7098BDE0B29441BFCD797812CF88
https://www.virustotal.com/gui/file/FF5D43B210545F931AE80A847D1789BB
