admin/APT_REPORT
1
0
Fork 0
mirror of https://github.com/blackorbird/APT_REPORT.git synced 2025-05-31 18:50:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
APT_REPORT/Blacktech
History
blackorbird 88970de50f
Update README.MD
2019-09-20 12:23:04 +08:00
..
blacktech-TSCookie.zip
Add files via upload
2019-09-20 12:21:25 +08:00
README.MD
Update README.MD
2019-09-20 12:23:04 +08:00
tscookie_data_decode.py
Create tscookie_data_decode.py
2019-09-20 12:20:32 +08:00

README.MD

report： https://blogs.jpcert.or.jp/en/2019/09/tscookie-loader.html

IOC

/index?o=E7E168C4EC82E /news?%c=%X%X /index?%c=%X%X /?id=%X%X /Default.aspx?%c=%X%X /m%u.jsp?m=%d /N%u.jsp?m=%d

C:\Windows C:\ProgramData\Microsoft C:\Users\Public\Documents C:\Program Files\Internet Explorer