Targeted destructive malware explained: Troj/Mdrop-ELD - Revision history

Eric.freyssinet at 23:00, 30 July 2015

2015-07-30T23:00:39Z

@@ Line 2: / Line 2: @@
 |Image=strexe.jpg
 |Legend=Source: Sophos Labs
 |Document=
 |Licence=
 |Video=
 |NomRevue=Naked Security
 |ISBN=
 |Page=
-|Abstract=I was confident it was malicious. And, because no other security lab seemed to detect the file, I picked a name, Troj/MDrop-ELD, wrote a quick detection, and went home.
+|Operation=,
 |Keyword=,
 }}

Eric.freyssinet: 1 revision imported

2015-02-07T14:27:28Z

1 revision imported

← Older revision		Revision as of 14:27, 7 February 2015
(No difference)

Eric.freyssinet at 22:37, 17 August 2012

2012-08-17T22:37:17Z

New page

{{Publication
|Image=strexe.jpg
|Legend=Source: Sophos Labs
|Document=
|Licence=
|Video=
|Link=http://nakedsecurity.sophos.com/2012/08/17/targeted-destructive-malware-explained-trojmdrop-eld/ nakedsecurity.sophos.com
|Author=Paul Baccas,
|NomRevue=Naked Security
|Date=17 août 2012
|Editor=Sophos Labs
|Year=2012
|ISBN=
|Page=
|Abstract=I was confident it was malicious. And, because no other security lab seemed to detect the file, I picked a name, Troj/MDrop-ELD, wrote a quick detection, and went home.

The next day, we saw a flurry of queries about a "new" piece of malware 'Disttrack'. It turned out that it was the same piece of malware that I had detected the previous night. So one of my colleagues did some more detailed analysis.
|Botnet=MDrop-ELD, DistTrack,
|Malware=,
|ExploitKit=,
|CCProtocol=,
|Operation=,
|Keyword=,
}}