Remove IPv6 Remove Malware Remove SMB Remove Windows
article thumbnail

MadoMiner Part 2 - Mask

AlienVault

In addition, take care with this portion of the malware. Malware Analysis. During the execution of sogou.exe, the following exploits are used to install on new victims’ PCs: CVE-2017-9073, RDP vulnerability on Windows XP and Windows Server 2003. CVE-2017-0143, SMB exploit. CVE-2017-0146, SMB exploit.

Malware 40