zanezhub.github.ioPublished
Analysis on Malware that attacks Israel’s Water treatment facilities
Excerpt
Entry Point
I go after the entry point of the malware and right away we can see that there’s only three main functions. This makes it easier for us to analyze the malware. I’m not sure why the author did not add a layer of obfuscation to the binary to make it hearder to analyze. Maybe this was a version that was not meant to be deployed/used in any meaningful way.
This is also a .NET malware so it will way easier to analyze than a binary created with a more common programming language like C/C++ or Golang/Rust . I guess this also was taked into account by the author.
The name of the malware is ZionSiphon.
Siphon: Device that allows the transfer of liquid t…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by zanezhub.github.io on zanezhub.github.io.
More from zanezhub.github.io2
- NotPetya Malware Analysis - Bye, boot partition. I’ll miss youzanezhub.github.io · Published 2 May
- WannaCry Malware Analysis - How YOU Could have Saved the World ꩜zanezhub.github.io · Published 19 Apr
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun