DUBNIUM infection chain – Computer Security Articles

Reverse engineering DUBNIUM –Stage 2 payload analysis

January 23, 2017 admin Advanced Persistent Threat, Advanced persistent threats, Antimalware research for IT pros and enthusiasts, DUBNIUM APT, DUBNIUM infection chain, DUBNIUM payload, Microsoft Threat Intelligence

Recently, we blogged about the basic functionality and features of the DUBNIUM advanced persistent threat (APT) activity group Stage 1 binary and Adobe Flash exploit used during the December 2015 incident (Part 1, Part 2). In this blog, we will go through the overall infection chain structure and the Stage 2 executable details. Stage 2 executables…