内容仅以原始语言提供
class="post-article">
Backdoor C/C++ 自2018年起活跃

EvilNum

EvilNum TA4563 APT. shellrundll.tlb COM type library DLL hijacking. vaeeva developer project PDB. Fintech/crypto targeting.

威胁档案
类型 Backdoor
编程语言C/C++
C2协议HTTP
首次发现2018
目标 Avrupa/Fintech
用途 / 能力
  • Backdoor/Stealer
尚未发现该家族的 C2 服务器。

研究报告 (1)

Yüksek

EvilNum -- shellrundll.tlb COM Type Library DLL Hijack, vaeeva Geliştirici PDB Yolu, gethostbyname Ağ Fonksiyonu | Yüksek

EvilNum 1.58MB. C:\Users\Administrator\Desktop\vaeeva\shellrundll.tlb geliştirici PDB. shellrundll.tlb COM type library DLL hijacking. gethostbyname gethostname ag fonksiyonu.

阅读报告 →