Record · corpus.blog/posts/01a0872e-ce07-7283-b976-78c6bfdc94ae

GrayFish rootkit analysis

artemonsecurity.blogspot.com · published 17 May 2017

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at artemonsecurity.blogspot.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 26
Words captured: 1,420

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

EquationDrug rootkit analysis (mstcp32.sys) Read at the source ↗

artemonsecurity.blogspot.com

https://en.wikipedia.org/wiki/Equation_Group

en.wikipedia.org

https://en.wikipedia.org/wiki/Network_Driver_Interface_Specification

en.wikipedia.org

https://cdn.securelist.com/files/2015/02/Equation_group_questions_and_answers.pdf

cdn.securelist.com

https://www.forbes.com/sites/thomasbrewster/2015/02/16/nsa-equation-cyber-tool-treasure-chest/

forbes.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgW95AGUPJJo5Qig00E2hZM6guDo5RV4v_UOhFvrD3ftuQboJBYcVjPFVsCQsyTG2hqodnmXnK5jwO8ByY0thedUgnXMMuXUTyRkck9DI2lTNhSGd7pHwjXaW-lDwifL3bS_MFxTBkSAoD2/s1600/federal-government-security-privacy-confidentiality.jpg

blogger.googleusercontent.com

Stuxnet drivers: detailed analysis Read at the source ↗

artemonsecurity.blogspot.com

Finfisher rootkit analysis Read at the source ↗

artemonsecurity.blogspot.com

Remsec driver analysis Read at the source ↗

artemonsecurity.blogspot.com

A note about Sednit rootkit Read at the source ↗

artemonsecurity.blogspot.com

Wingbird rootkit analysis Read at the source ↗

artemonsecurity.blogspot.com

http://www.angusj.com/resourcehacker/

angusj.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIC0KnJOyGe8VhvooXKJOjEVgYwo4QVDhnmT63XjPBspLYgu-XtqytM1Ba7gxGcp6iRZPJjnk110vjvwxeDvjzCMjD0RKxskjbj5fxNFd0NgOx6HyA7l09GS9a1bqNd_812PzcWoeb9web/s1600/pp.png

blogger.googleusercontent.com

https://msdn.microsoft.com/ru-ru/library/windows/desktop/aa363216(v=vs.85

msdn.microsoft.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAyO4_y3XyLCmkhEGCMmCs6WrqgAipyo4XHVmB66v6F4tNQiShMhRxBhLMsEMywn4cSNcYESoyw95frnI96iI2fFI8JV-vrqbMRYTT9fpYlyDNd2S3J2WxK9ly-6lxHWoE4eGUuKKJ1yPK/s1600/66.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9bh_TefUZUj06PVGuaZCUyIr4FYStAusSRdic3pv-LKJjuVOcDBbh8dvZZugDvbHYDJj9h0nUDqwXQFkusA7zYqxHavO6zZgLAi2UquGwg1RLoxY2Cw_-Wvq-X3vTvVqoYhMQuiNnl1sj/s1600/5.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1rYdS1RVWJkFzScEj1F6tCKWMB9BYggBzwbOaEW0HI3QNjoNbJNV7JTzG_snTS2NpWn8NrcTH_FjyN28T2qfQpUARTNH1yZTJt_XgdG-nRznY1mqe4KjSLVEKMFibrxuF3yn6-52wLi7m/s1600/11.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9T597vJugdqF_HcxdnkaPS0fpN_VQQ7GqofjIWgVIxuPRavYsfqajFucki-xhMRKn2Ptinov7f_yI0ELUmlemSIXGfuDUH4mPl-vdD9td-gS06fx7ATbi1EN3aK1WJU-uwhtwzh32GQmR/s1600/3.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmpoDwAwzzHHNYZ8HEfDRrOhD6VPQwAbcOdG2QPx_5oNTx3JMECLTvO_jdkq0fVyJZczZg4ke6SpSnBAvRJrr8xhBd-8geL-LLNYE5IXSCKn4v1DYhAYoJqs_3la11nybPLxfvO9w608ii/s1600/2.png

blogger.googleusercontent.com

http://artemonsecurity.blogspot.com/2016/10/remsec-driver-analysis-part-2.html?m=1

artemonsecurity.blogspot.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRYWm3_VlWhMO34Lf4PsAHLu_h_9Xu6j7oE7Eo1dlSnHL3ivBug41ZZ9BCu_qf0qUVZ0qOkWTyZGwj5-zzD3YBzTTP10ctrA12izt3HcMil2dm8iovHRPrTQpy6ELZKfwDJeJ8a_GVyNEG/s1600/6.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKLOfpKkuVC1l-wmdojvsx8tn5PLuwLyghRIF7IrXTOyq3gujTR6ja9kgsjvdfLIsQm5gvKhFxj1e4dFj973YDH3WFeUB3Xi7rOXQDt2yWXcLf7HTNRoAxTKsYphEA5pByHy06v8GyB6y_/s1600/12.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLzTTrxiiF9exBG7SJP064ZSfo76zvwe7l3mFBWell5I-HuRBRZpLzbQKU4MRTtiOHp2C3QG75JdgrBgx-wWKTEthkuIfHlF2kF3A6BfJ3r9slzJzSu5eYzFspo5boz_GT8NF1nBzheT2H/s1600/13.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBrbGNj66M6tuuNfQnxcgr9UTq8rOYbu5yErJhNmilkhoLZwGYiX6o28iNcjSpLQ4PgBp4JZ4BmswoCLhRKoLJ6z9d8DYSTijXy8wwWBrJoR-QzPicbErxs_wTmDsEW_-ROJKqaa-g_KT4/s1600/14.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjC8YO5g3pavGfxfKLLm9rjguk90UXoQgZ5ubS8L8PzMI6kXwG7kXbnP5Zz3JuktgXKkldATtoPYB4VsxRZwSkUZSrkvpn__cI0zpBvxUvFPdnI7Y5Cegs5syej1TiAZDDba8JtF-9WhkOf/s1600/15.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQOPq7xMQYBFIhqGRtfEu2vaqQDI7Pdn8DRfEBodRXJ06vb9s7bjIo6RRIAhn6L7eURZFtfhGdWRsTo11XW78QZELVlL-P_4xZv5wGhtbl6ZYyVDKplSLd9K9P26WA5RO1X1xt9YKiHEh9/s1600/16.png

blogger.googleusercontent.com