[nl95]

Hi guys,

I'm interested in those Exchange backdoors:
6874b387a1c07d85bbedbd196cae3f06539cbcc724395723034196a3ad016724
4dc26b3b144826569bc2601fb20dcef124abf9fe63944c029a52eda488c16829

Thanks!

Reference:
https://twitter.com/Int2e_/status/1176034896877367297
http://www.rewterz.com/rewterz-news/rew ... ns-malware

[Fedor22]

Samples attached.

[nl95]

Thanks! I also found several samples that not available right now on VirusTotal
3C851E239FBF67A03E0DAE8F63EEE702B330DB6C
76EE1802A6C920CBEB3A1053A4EC03C71B7E46F8
FF28B53B55BC77A5B4626F9DB856E67AC598C787
C1FF6804FDB8656AB08928D187837D28060A552F
F9D52BB5A30B42FC2D1763BE586CEE8A57424732
0A9F10925AF42DF94925D07112F303D57392C908
A4D1A34FE5EFFD90CCB6897679586DDC07FBC5CD

Reference:
https://www.welivesecurity.com/wp-conte ... Neuron.pdf

[Fedor22]

Thanks! I also found several samples that not available right now on VirusTotal
3C851E239FBF67A03E0DAE8F63EEE702B330DB6C
76EE1802A6C920CBEB3A1053A4EC03C71B7E46F8
FF28B53B55BC77A5B4626F9DB856E67AC598C787
C1FF6804FDB8656AB08928D187837D28060A552F
F9D52BB5A30B42FC2D1763BE586CEE8A57424732
0A9F10925AF42DF94925D07112F303D57392C908
A4D1A34FE5EFFD90CCB6897679586DDC07FBC5CD

Reference:
https://www.welivesecurity.com/wp-conte ... Neuron.pdf

I found some samples in this list, they are available in VirusTotal:

Code: Select all

F9D52BB5A30B42FC2D1763BE586CEE8A57424732
0A9F10925AF42DF94925D07112F303D57392C908
A4D1A34FE5EFFD90CCB6897679586DDC07FBC5CD

See attach below.