SALITY

Recommendations

Info

Latest URL Pack File Latest URL pack version: 240 from 8/24/2015 19:42 http://tattooinindia.com/bottom.gif 13 KB, RC4 encrypted http://frmaurice.org/images/bottom.gif http://tattooinindia.com/bottom.gif http://intermarc-ng.com/img/bottom.gif http://bajaparkingcommx.ipower.com/bottom.gif http://79.96.88.43/bottom.gif http://lexcorpapp.com/bottom.gif http://hunerelektrik.com/bottom.gif http://www.uolist.net/list/img/image.gif 2015 LookingGlass Cyber Solutions Inc.
Rootkit Simple (5 KB) but effective rootkit (driver based), creates a device: [3] \Device\amsint32 \DosDevices\amsint32 Kills processes by using NtTerminateProcess Filters IP packets and drops packets containing certain AV vendor strings (picture on the right [3]) amsint.sys 4.56 Kb MD5 31DE33A273CF87952E94D3534335A9B1 SHA1 4DF636D4DE33D549A3A6E27CA75E8EB60E77C77A 2015 LookingGlass Cyber Solutions Inc.
Page 1 and 2: SALITY 2003 - TODAY. PRESENTER: Pet
Page 3 and 4: Timeline 2003 First appearance [1]
Page 5 and 6: 2015 LookingGlass Cyber Solutions I
Page 7 and 8: Author of Sality? In those old emai
Page 9 and 10: Statistics Up to 2 million per day
Page 11 and 12: Statistics The reasons mostly 3 rd
Page 13 and 14: Link between ddos attacks and Salit
Page 15 and 16: • Only active botnets are #3 and
Page 17 and 18: Network #3 Sample Injects into a ra
Page 19 and 20: P2P Algorithm • Reinventing the T
Page 21 and 22: URL Packs • Examples (they always
Page 23 and 24: URL Packs • Network 4 has many in
Page 25: URLs in the URL Packs • Every URL
Page 29 and 30: 2015 LookingGlass Cyber Solutions I
Page 31 and 32: How to remove on a single machine 1
Page 33 and 34: LIVE DEMO P2P Crawler 2015 LookingG
Page 35 and 36: Thanks for attending the presentati

SALITY

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?