https://www.botnets.fr/index.php?action=history&feed=atom&title=Shamoon_the_Wiper%3A_further_details_%28Part_II%29 2026-10-24T22:22:19Z Revision history for this page on the wiki MediaWiki 1.43.11 https://www.botnets.fr/index.php?title=Shamoon_the_Wiper:_further_details_(Part_II)&diff=3048&oldid=prev 2015-02-07T16:57:03Z

<p>Text replacement - &quot; www.securelist.com&quot; to &quot;&quot;</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 16:57, 7 February 2015</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Publication</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Publication</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|Link=http://www.securelist.com/en/blog/208193834/Shamoon_The_Wiper_further_details_Part_II <del style="font-weight: bold; text-decoration: none;">www.securelist.com</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|Link=http://www.securelist.com/en/blog/208193834/Shamoon_The_Wiper_further_details_Part_II</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Author=Dmitry Tarakanov</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Author=Dmitry Tarakanov</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|NomRevue=Securelist</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|NomRevue=Securelist</div></td></tr> <!-- diff cache key wiki:diff:1.41:old-2516:rev-3048:php=table --> </table>

Eric.freyssinet https://www.botnets.fr/index.php?title=Shamoon_the_Wiper:_further_details_(Part_II)&diff=2516&oldid=prev 2015-02-07T14:28:04Z

<p>1 revision imported</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 14:28, 7 February 2015</td> </tr><tr><td colspan="4" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div> </td></tr> <!-- diff cache key wiki:diff:1.41:old-2515:rev-2516 --> </table>

Eric.freyssinet https://www.botnets.fr/index.php?title=Shamoon_the_Wiper:_further_details_(Part_II)&diff=2515&oldid=prev 2014-08-31T14:16:18Z

<p>Remplacement de texte — « Kaspersky lab lab » par « Kaspersky lab »</p> <p><b>New page</b></p><div>{{Publication<br /> |Link=http://www.securelist.com/en/blog/208193834/Shamoon_The_Wiper_further_details_Part_II www.securelist.com<br /> |Author=Dmitry Tarakanov<br /> |NomRevue=Securelist<br /> |Date=11 septembre 2012<br /> |Editor=Kaspersky lab<br /> |Year=2012<br /> |Botnet=Shamoon<br /> |Abstract=We leave the speculation up to others and concentrate strictly on sharing technical details. This is the continuation of our investigation into Shamoon:<br /> <br /> NETINIT.EXE<br /> <br /> The main Shamoon module has a resource PKCS7:113 that maintains an executable which is saved to disk as %WINDIR%\System32\NETINIT.EXE and this program poses a module to communicate with CNC. This program waits for parameters to be run with. The author was not too creative and coded a handling of just two argument values which can be “0” or “1”.<br /> }}</div>

Eric.freyssinet