Record · corpus.blog/posts/01a087dd-ac7d-72ff-a9ef-a79c01ac29a0

Clearing the MuddyWater - Analysis of new MuddyWater Samples

sec0wn.blogspot.com · published 8 May 2018

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at sec0wn.blogspot.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 23
Words captured: 2,276

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://sec0wn.blogspot.ae/2018/03/a-quick-dip-into-muddywaters-recent.html

sec0wn.blogspot.ae

https://www.fireeye.com/blog/threat-research/2018/03/iranian-threat-group-updates-ttps-in-spear-phishing-campaign.html

fireeye.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRW6meOfIXKYZPhqYhSBWsdIQX2mg9Mqtc_E_LJlJNf8VIXcG4oJn0E-WBORaPUNV3X6rGF8FfFyV6rQJRyoVRESDRxSFj2Ffx8lsHnIEYxyL0fSVG-YVl2svZ7TvWLjTvVNaNHZvWQpwq/s1600/Election+Pakistan.jpg

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbMQLE-HuIf4w7SdoOqt8Ily1d51KJ4lLkbeSqAGsuNbk4j69g9l3qJIkKilYXT4x4o4buon0KG9QOr_JHXGYpqVq8gSi5Ep7fR8DrMsdoAxpy2OYpL8M4u4OcwDIaV4nttI7eNC_wOME7/s1600/Invest+in+Turkey.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjE_O-MUvERfqbjH1U5EwP-M_5mub6QZl9eHosWsmxx5VC2fcJnqdp_laEO7zEe95b0bcrZft7EObEc3XkbVWdxoXTS7PHRinN4qYb1jpZ4D-WECZ5Q_9QBX-kbpVS53WnlpGbp656m66v9/s1600/IQMOFA.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJbJa2ReDYPLU7A5LXzJb15hvhCzCcNHWp5nJynjBlp8GeESJ068cUVc3uMmiFCh9cQ1X7vB48QfLgfKwldllWxs595PBNFGkJx5VCnF4yxHS-swOhfWMJQIR_QadqZYhoEgo_ACTLAfrg/s1600/National+Assembly+of+Pakistan.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzoViCn-hejHpuX8mmlvVvC4iQhyphenhyphen-91WnKC3Pd1Y5kYsNDgdIjrzQ78MTj3xL9eRP86scJfa3rPa1ZunFul33uYuh6M9X4lylLwXsoOr77svS_l7f7wXpq0QIB5uoqU30vCIOMXB0EnFWO/s1600/Turkish+Security+Guidelines.jpg

blogger.googleusercontent.com

https://sec0wn.blogspot.ae/2017/11/continued-activity-targeting-middle.html

sec0wn.blogspot.ae

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghMqmtsDpaqLGzkehPldZZ3EYUfaKZvBYSlbre3ubzO4sodeO_oYzY4Rr5_EzgG1ro0Jvd5Pg9gFTWTgSZ8RMVh4P_R2xnYW_SqKQ2GwCQfVoBCoORWyF6a3NlWjGVxlmZhOMvVZGJSGnY/s1600/Macro+Code.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcsKO_BnYcHwSNkqd9AqAjERAl3bzfLIL5fbh1antUvKGow2A1Y7djgCVsGIFOvE04qqsVthNKrKYV-loDQUkEehV7WkeKK5Y40V4XRA-HvG50ewVlMQDi4nBXhTeWsy3L-MH7qAJaQIrB/s1600/first+Bas64.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3PxxdMusVpiAMQWUgFG5M3LGLSbd8wHs0W26CJWkBDVDe__ezb9RRIErAaBFYQtMa9d-NTtKncMkcxFtcIYFRwMcOb8krMihgMJ3YLWKB5Pti1mXg1gkvS1uywdsveHswjBQ7rbMLz2n1/s1600/second+Base64.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCMyL0F5DlwrhKktU5-n57NvvyfVqGZ7LIrcRFM9IilVHzELGHQOGyYW-opoeG5TKcVqovpmqbUDHnx-UD50l-AZdBi-i2JZ9QvBofEQIIVMyoiTKPkAiKQ9N15ommK_6FNJvkLKsXXnPW/s1600/third+Base64.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3R4Za0VBWjp97-Ka1HGFnIncEmxO0grP9no3s8gAGK2pRcRR3eN6kYKg4O6G9Zo9EJx0hNe_ehiGBi2gLApbhcp3aDKi8m2hzXU6bfNoWuQ73KYtK9QECb3FD_FE0IFo6BwprRAwsOAle/s1600/Encoded+Data.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpTrz_kJlU_yguI_ZXSnUVQVyti-Uuad5UErQjLJsLmnVCVj2xR8e_X_tVQdoPirtrhcbbidfpc75wcDLBxE4Wi0CQHKPBr9IqHYioeT-NvBbHodUOx3eje0SQgEi-wGRyrw6K_3Bm0D5W/s1600/Encoded+XML+and+JavaScript.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUEY3jAxpydeseDY5_U5SPynrwiVWV7PNgDD4AHWYAc7bIVDLQd6CjrnevQq8f7eR9WWfsMVW5T1EaLcRlvH40T0SoJfGCv6iAbp2Gutrf9dBTAf2wjeBuz1URdSJ67ajVn_U2PYnCQXTY/s1600/decoded+JS+script.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXRyj3JBUWu6p6XUgL3XcNjXMaA_40J_i4F3zjKkLGCQOe_wbFZ_kH1DbIltqumjsFS8tWHRVtfjK2plTb5OvQvobQjVvnhu24rY3k_6BvAHBu806VHW42W0aG2l5OQZiNCCTt6qT4WJbt/s1600/first+PS+encoding.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiy_k94g4ih7AN6_t0u-4Ffq_m_dij94n8wCdAIfnRRaUposx98B3uUzrodOVdrdUcQ-L3hq0Yh22Q8pWFo71ec1WynjR2msj45Adc_LEGXhyWhg8eTMIXuhy4EEyTh7obSpSZJtZXu8BeP/s1600/first+PS+decoding.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrawlkpcXIOmSd0Pqoy8GyFkWMhIFbzjiDsB7lPPGvXNt1MtL8Us_DyEX1W1f_FGObrWias1nyhv6NvWkOgyOGY1ruFWutBZAcf_qeHa7k6FhktqombFvKgaRHv-X5QjJrQswrWUJTgNs7/s1600/second+PS+decoded.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgK56S49zHMhDr5RXFN0woLOH8fhuT0etirfpl4DXx4ALGPHIlxtjay9-x854HqkLiMGYaKNBv8GRywuna6NTFv4aOu3waRNzv4yypPFsch557Hx5BcjQaTUH0NGuHR6iWCym1iNwfCNv-7/s1600/final+decoded+PS.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzJ-8yKAgc1g4H8NMAba6D10ZEZwnUnYgw85zOOuSouGlogDdMtJ0_GDjNOPs7XSEHPLxMNgMzsow5oo2i6RMeq0sOF10JZHjFkCH2GnBc-u6HuFdhEOOps5JOADm_H2j9AObYy5djdHit/s1600/Screenshot+function+and+encode.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7uE5xUx2fvcDpHbrzw9HaYbTmUrOhe2cD7jqYooYgjDhfvHVBXYyw9AvhPRbI_zgIqPEt8GhpOZpadPqJPZMfFcrTvioL1eoI1mZYb9vFJR47JGPR7naP7jRtbBeZx8gD11Oa-uQBteE5/s1600/Looking+for+VM+Processes.PNG

blogger.googleusercontent.com

https://twitter.com/peewpw

twitter.com

https://github.com/peewpw/Invoke-BSOD/blob/master/Invoke-BSOD.ps1

github.com