Skip to content

Instantly share code, notes, and snippets.

@Blevene
Created April 10, 2019 21:08
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Blevene/4d26a5b5ab50baa6541874c73509383c to your computer and use it in GitHub Desktop.
Save Blevene/4d26a5b5ab50baa6541874c73509383c to your computer and use it in GitHub Desktop.
Additional Hoplight IOCs
Sourced from VT search, YARA rule provided by US-CERT, modified for VTGrep
content:fjiejffndxklfsdkfjsaadiepwn AND (content:google.co OR content:naver.co)
Ref: https://www.bleepingcomputer.com/news/security/dhs-and-fbi-issue-advisory-on-north-korean-hoplight-malware/
a1eb5a0f15cbe7cdd5eb84839f7490aecf38979467f549a9f9b0591e75d7fab6
b0284e9c4cba2bfd019436d4cbe8f1238fd3f6ed4cb79576057be8c4b74d95e0
741c0e5234c85c488f165d5248707436210f15a5c9a43003fec741da1ad05f98
797a23e0900113b23d468d0050cd0c05f15d3afb34eec4d0e27a6f06398dd849
5712e44c3083e394310042afaef6eb40fbe0c56e551433a6370b1f4b9ef0c0e9
889b744a81ccf1209d724798aa1ef1aa2212ba82007c942a6a8746b7b0c3d616
3a19ed3cb29ed97fb147c94a431b7642ece91e1e87b25c8051cef26553683c39
332de41e9a3e913680bc7bdcc979cc33f9e2e2739c6e7e0619670e85fd0b9a81
0d184deca112794088ff89b388e464b45051d7e5aa65012ef7136fb733ebe1a7
cd5ff67ff773cc60c98c35f9e9d514b597cbd148789547ba152ba67bfc0fec8f
fc1f0b0c7a5bc3398c3438b2e707f8ea5fa51b3007f927481f83b94fbdc8656e
a1eb5a0f15cbe7cdd5eb84839f7490aecf38979467f549a9f9b0591e75d7fab6
b0284e9c4cba2bfd019436d4cbe8f1238fd3f6ed4cb79576057be8c4b74d95e0
741c0e5234c85c488f165d5248707436210f15a5c9a43003fec741da1ad05f98
797a23e0900113b23d468d0050cd0c05f15d3afb34eec4d0e27a6f06398dd849
5712e44c3083e394310042afaef6eb40fbe0c56e551433a6370b1f4b9ef0c0e9
341cffd90fce29f0df63a7763a2a588b40c678a0903b2199d0d208a3fd3ad60b
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment