External/APTs-Adversary-Simulation
1
0
Fork 0
mirror of https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git synced 2026-08-04 09:41:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
S3N4T0R
2025-07-28 08:46:31 -04:00
committed by GitHub
parent d037a770d1
commit 1336202617
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
North Koreans APT/Stardust Chollima/README.md
+2 -2
View File
@@ -21,7 +21,7 @@ PowerRatankba in the background by useing (Base64).
Zdnet resources: https://www.zdnet.com/article/north-korean-hackers-infiltrate-chiles-atm-network-after-skype-job-interview/
The PowerRatankba sample used in the Chilean interbank attack, differently from other variants, communicates to
the C&C server on HTTPS, This latter code is registered as a service through the “sc create” command as,
the C&C server on TCP, This latter code is registered as a service through the “sc create” command as,
the malware gain persistence by setting an autostart.
@@ -40,7 +40,7 @@ PowerRatankba in the background by useing (Base64).
control via C2 server and latter code is registered as a service through the “sc create” command as,“ the malware gain
persistence by setting an autostart .
4. C&C server on HTTPS: When a command is received, it is executed using the PowerShell command in Windows.
4. C&C server on TCP: When a command is received, it is executed using the PowerShell command in Windows.
The output of the command is captured and sent back to the C2 server.