corpus.blog
41554 blogs · 4,504,310 posts Claim your blog
Record · corpus.blog/posts/01a0d4b5-c53f-7280-bd2c-489d8af28613

FrostyGoop’s Zoom-In: A Closer Look into the Malware Artifacts, Behaviors and Network Communications

Unit 42 · published 19 November 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
30
Words captured
3,348

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://ukraine.ohchr.org/sites/default/files/2024-09/ENG%20Attacks%20on%20Ukraine%E2%80%99s%20Energy%20Infrastructure-%20%20Harm%20to%20the%20Civilian%20Population.pdf
ukraine.ohchr.org
https://www.paloaltonetworks.com/network-security/zero-trust-ot-security
paloaltonetworks.com
https://docs.paloaltonetworks.com/ngfw
docs.paloaltonetworks.com
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/about-threat-prevention/advanced-threat-prevention
docs.paloaltonetworks.com
https://www.paloaltonetworks.com/network-security/advanced-wildfire
paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/p/XPANSE
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/p/XDR
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/p/XSIAM
docs-cortex.paloaltonetworks.com
https://docs.paloaltonetworks.com/prisma/prisma-cloud
docs.paloaltonetworks.com
https://start.paloaltonetworks.com/contact-unit42.html
start.paloaltonetworks.com
https://unit42.paloaltonetworks.com/tag/json/
unit42.paloaltonetworks.com
https://unit42.paloaltonetworks.com/tag/iot/
unit42.paloaltonetworks.com
https://unit42.paloaltonetworks.com/tag/russia/
unit42.paloaltonetworks.com
https://hub.dragos.com/report/frostygoop-ics-malware-impacting-operational-technology
hub.dragos.com
https://x.com/DragosInc/status/1820476794052452382
x.com
https://ecopower-eu.com/en/enco-control/
ecopower-eu.com
https://github.com/rolfl/modbus
github.com
https://github.com/goccy/go-json
github.com
https://github.com/hsblhsn/queues
github.com
https://www.virustotal.com/gui/file/9cf30d82a86a9485f7bbd0786a5de207cf4902691a3efcfc966248cb1e87d5b7
virustotal.com
https://learn.microsoft.com/en-us/sysinternals/downloads/procmon
learn.microsoft.com
https://cs.opensource.google/go/go/+/go1.23.1:src/crypto/aes/cipher.go;l=34
cs.opensource.google
https://gchq.github.io/CyberChef/
gchq.github.io
https://zerontek.com/zt/2024/07/24/how-to-find-and-probe-enco-plcs-on-the-internet-just-like-frostygoop-malware/
zerontek.com
https://nvd.nist.gov/vuln/detail/CVE-2023-33538
nvd.nist.gov
https://www.paloaltonetworks.com/resources/datasheets/cortex-xsiam-aag
paloaltonetworks.com
https://www.paloaltonetworks.com/cortex/cortex-xdr
paloaltonetworks.com
https://docs.paloaltonetworks.com/wildfire
docs.paloaltonetworks.com
https://www.cyberthreatalliance.org
cyberthreatalliance.org
https://www.sans.org/blog/whats-the-scoop-on-frostygoop-the-latest-ics-malware-and-ics-controls-considerations/
sans.org