内容仅以原始语言提供
class="post-article">

TiGeRFirewall

Brezilya kokenli bankacilik Trojani. TiGeR-Firewall marker ile tanimlanan, LORD grubunun LORDDecrypt sifrelemesini kullanan .NET malware. Sahte Adobe Update maskesi, Umbrella.flv.exe dropper, netsh firewall manipulasyonu, avicap32.dll ile webcam, ClipboardProxy ile pano izleme yeteneklerine sahiptir.

威胁档案
类型 Backdoor
编程语言C#/.NET
C2协议custom
首次发现2020
目标 Brezilya/Latin Amerika
用途 / 能力
  • Banking Trojan/RAT
尚未发现该家族的 C2 服务器。

研究报告 (1)

Yüksek

TiGeRFirewall 39cbd2d2 -- Brazilian-Banking-Trojan LORDDecrypt Umbrella-flv-exe netsh-firewall-allowedprogram avicap32-webcam Adobe-Update-disguise ClipboardProxy | Yuksek

TiGeRFirewall 39cbd2d2 PE32 .NET 93KB. Brezilya banking trojan. LORDDecrypt. Umbrella.flv.exe. netsh firewall add allowedprogram. avicap32.dll webcam. Adobe Update maskesi.

阅读报告 →