Earth Zhulong: Familiar Patterns Target Vietnam

SHA256	
04209d20de908f72230e078604f8415794edcdbd53f1fb906b842391cd997ede	W2KM_POWLOAD.SME

fa602ead3692977ebd87a72d4aecbf9be2cb3db6422d2d4cc7c2d96a553b0df4 	Trojan.Win32.SHELLFANG.ZBJK

0a97caffeb1e225c2e32c98a306dd95f8365778d87a1691a16f5ab16ad3777c7 	Trojan.Win32.SHELLFANG.ZAJI

604b202cbe5e97c7c8a74a12e1f08e843c08ae08be34dc60b8518b9417c133a9	Trojan.Win32.SHELLFANG.ZAJI

a63003e75347a5913e5986f99774c5e8cbebfbbd5c1cfd8d1feb9416d15d94ab	Trojan.Win32.SHELLFANG.ZYJK

a52fc40d356e15e70e40f318d779d73962cdcc0d39a24847b0c5141272c7addc 	Trojan.Win32.SHELLFANG.ZYJJ

f7fe4f69b49ab6001b9223623850cef497acd91068643bd1f20ea4644f24f5b2 	Trojan.Win32.SHELLFANG.ZYJJ

6de1a7ffec07e42adda5d83c6e5713bf310a1759a43cd33cb02107d54dab0c25 	Trojan.Win32.SHELLFANG.ZYJJ

0368921a822218c27356a00289bcfe7e23f388c913a36ba21031506abf5d904a 	Trojan.Win32.SHELLFANG.ZYJJ

6aec59830c7238c9c4b2435ce0c9399ce1db8cfc7dbfa089b5d3f626ef4775ef 	Trojan.Win32.SHELLFANG.ZYJJ

eefb819a78fe881c22e00eb67b52155e343874afc2513d1fc65ad1cd4670e61b	Trojan.Win32.SHELLFANG.ZYJJ

4b1b2a160d0c2d5b1bbb07619a71639b49bb8a5567a167f8ed317207350589ae	Backdoor.Win32.COBEACON.ZBJk.enc

dc4d3aa6826008f4f82edb5afddc608acfdee40dae1e6baab3430ac82951830b	Backdoor.Win32.COBEACON.ZBJk.enc

a61eee0cd6b7b8c3d70172d4596ab4187bedcece24da98463866cac0bc9a9f64	Backdoor.Win32.COBEACON.ZBJk.enc

4445989a6e75cd4716fed32c04ae124c1b2e70d6f1cde58b5f76158e4d8636d2	Backdoor.Win32.COBEACON.ZBJJ.enc

13f53731274e944d7d8e07eeb725bd569e808a85a3c3b247afca71c8438705d5	Backdoor.Win32.COBEACON.ZBJI.enc

ac82388dbd0bd23ad5cc7057f46727e7a7dfb3f3622477303a349a4aa4b2a357	Backdoor.Win32.COBEACON.ZCJH.enc

bba60e162f2d6e017860f529b70f6d38c4c3725cae807ffdc51c62744bd6ae3a	Backdoor.Win32.COBEACON.ZBJk.enc

012eba21c8b5dcd541019838cd58adcda93f881206b12250d143c9356e1795c5	Backdoor.Win32.COBEACON.ZBJk.enc

7363c9a4a418193c07c072b641ae0ccde9cff686b0dc07dbb02177d9a671edd2	Backdoor.Win64.MACAMAX.ZYJK

51317f787125d38f3777de8023a006d7e19dcdb523eae4c4bb643d6b31c14e88	Backdoor.Win64.MACAMAX.ZYJK

69f8987047aa89c2d32f919cd285303abea7b9fc8d2afb54e42255ba362985fe	Backdoor.Win64.MACAMAX.ZYJK

d4e9986e9ad85daae7fabd935f021b26d825d693209bed0c9084d652feef0d77	HackTool.Win64.Macamax.A

5adfef3f7721d6616650711d06792c087fd909f52435c8124c5f940f7acbdb48	Backdoor.Win64.MACAMAX.ZYJK

c671f6bbc04ecc147a1055e3095eec6dcb903ba2923617906eccd4da635e35aa	Backdoor.Win64.MACAMAX.ZYJK

3c84e766669b80ea343f26f43bb58e6659b45278d05252d83c93f109b4370572	HackTool.Win32.EARTHWORM.ZBJJ

a6b90ada6849fab24564a0f29e68ea5a820ec429cc732c3868449d4fe4dd42d4	HackTool.Win32.EARTHWORM.ZAJJ

c61e2491f39bcee9f9ae91ae39160c453ea292237dc0cce50e97758e74c8b2fe	HackTool.MSIL.SHARPHOUND.ZCJK

---------------------------------------------

C&C

update.baohoety.com	82.118.22.148

update.aninhthudo.com	209.209.50.253
			45.121.145.31
			103.254.75.167