2021-03-12 - TA551 (SHATHAK) ITALIAN TEMPLATE WORD DOCS PUSH URSNIF (GOZI/ISFB)

ASSOCIATED FILES:

NOTES:

 

IMAGES


Shown above:  Screenshot from one of the Word docs.

 


Shown above:  Error after I enabled macros.

 


Shown above:  Macro code and deobfuscated variable data.

 


Shown above:  Traffic from one of the installer DLLs I manually downloaded.

 

Click here to return to the main page.