[waffles2.0]

Recently Symantec published this regarding Shamoon/Disttrack: https://www.symantec.com/connect/blogs/ ... ks-shamoon

I am looking for a copy of a recent version of Shamoon and the RAT they talk about in this article.

Thanks for the help.

[waffles2.0]

Got some recent samples of Trojan.Ismdoor:

https://www.hybrid-analysis.com/sample/ ... mentId=100
https://www.hybrid-analysis.com/sample/ ... mentId=100

[maddog4012]

see attached
https://www.virustotal.com/en/file/cebd ... /analysis/

[Sophos]

Got some recent samples of Trojan.Ismdoor:

https://www.hybrid-analysis.com/sample/ ... mentId=100
https://www.hybrid-analysis.com/sample/ ... mentId=100

i downloaded samples but it doesn't work in windows 7 32bit do i need to change date to let it work ?

Regards

[EP_X0FF]

If you ask for samples, we assume you know how to use them (or at least how to make them work in a test environment).

http://www.kernelmode.info/forum/viewto ... =20&t=1950

[tildedennis]

The latest Ismdoor samples (attached) have switched to a DNS C2 mechanism:

https://www.arbornetworks.com/blog/aser ... -dns-isms/