Vulnerabilitycritical
Gauss: Abnormal Distribution
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-2568 | Remote Code Execution in Microsoft Windows via Malicious Shortcut (LNK) Parsing | — | 90% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 01567ca73862056304bb87cbf797b899 | B8070DF0B3521D78E1B8D2FCE4 FA54A8D31E1434539FBB9A412F4D32FF 01567CA73862056304BB87CBF797B899 23D956C297C67D94F591FCB574D9325F” Image Size 258 048 bytes |
| md5 | 055ae6b8070df0b3521d78e1b8d2fce4 | 4ECA93114947C777B19D3C6059 08D7DDB11E16B86544E0C3E677A60E10 055AE6B8070DF0B3521D78E1B8D2FCE4 FA54A8D31E1434539FBB9A412F4D32FF 01567CA73862056304BB87CBF7 |
| md5 | 08d7ddb11e16b86544e0c3e677a60e10 | lp32.dll “ Some known MD5 “C3B8AD4ECA93114947C777B19D3C6059 08D7DDB11E16B86544E0C3E677A60E10 055AE6B8070DF0B3521D78E1B8D2FCE4 FA54A8D31E1434539FBB9A412F |
| md5 | 23d956c297c67d94f591fcb574d9325f | D31E1434539FBB9A412F4D32FF 01567CA73862056304BB87CBF797B899 23D956C297C67D94F591FCB574D9325F” Image Size 258 048 bytes Number of resources 7 Resources 1 |
| md5 | c3b8ad4eca93114947c777b19d3c6059 | emwmiqry32.dll %system32%wbemwmihlp32.dll “ Some known MD5 “C3B8AD4ECA93114947C777B19D3C6059 08D7DDB11E16B86544E0C3E677A60E10 055AE6B8070DF0B3521D78E1B8 |
| md5 | e379270f53ba148d333134011aa3600c | dskapi.ocx Some known MD5 “ED5559B0C554055380D75C1D7F9C4424 E379270F53BA148D333134011AA3600C EF83394D9600F6D2808E0E99B5F932CA” Image Size “1 327 104 byt |
| md5 | ed5559b0c554055380d75c1d7f9c4424 | or ‘Kurt’. File names %system32%dskapi.ocx Some known MD5 “ED5559B0C554055380D75C1D7F9C4424 E379270F53BA148D333134011AA3600C EF83394D9600F6D2808E0E99B5 |
| md5 | ef83394d9600f6d2808e0e99b5f932ca | B0C554055380D75C1D7F9C4424 E379270F53BA148D333134011AA3600C EF83394D9600F6D2808E0E99B5F932CA” Image Size “1 327 104 bytes 954 368 bytes 962 560 bytes 41 |
| md5 | fa54a8d31e1434539fbb9a412f4d32ff | B11E16B86544E0C3E677A60E10 055AE6B8070DF0B3521D78E1B8D2FCE4 FA54A8D31E1434539FBB9A412F4D32FF 01567CA73862056304BB87CBF797B899 23D956C297C67D94F591FCB574 |
From the original article
12 min read at securelist.com
While analyzing the Flame malware that we detected in May 2012, Kaspersky Lab experts identified some distinguishing features of Flame’s modules. Based on those features, we discovered that in 2009, the first variant of the Stuxnet worm included a module that was created based on the Flame platform.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.