2024-01-02: Site is back on track, self-hosted on a rpi because you get the Internet you fund.
2025-02-06: Oh well, some power grid issues caused the rpi to reboot, I really should configure uwsgi to restart automatically --'

← back

06e17a5a-7325-4325-8e5d-e172eba7fc5b
Iranian "powerless" malware path

06e17a5a-7325-4325-8e5d-e172eba7fc5b Iranian "powerless" malware path

Version	4
Variant	specified in RFC 4122
urn	urn:uuid:06e17a5a-7325-4325-8e5d-e172eba7fc5b
Hexdump	06e17a5a732543258e5de172eba7fc5b
Bytes	␆ßzZs%C%Ä]ßrδºⁿ[
UUIDv4	version (4) + randomness
(would-be) MAC Address	e172eba7fc5b
(would-be) is_local bit	True
(would-be) is_multicast bit	False
(would-be) MAC Manufacturer	None
(would-be) MAC Date	None

Links :

UUID registration form :

Iranian "powerless" malware path

https://www.cybereason.com/blog/research/powerless-trojan-iranian-apt-phosphorus-adds-new-powershell-backdoor-for-espionage

The logs are being stored in the following path: "C:\\Windows\\Temp\\Report.06E17A5A-7325-4325-8E5D-E172EBA7FC5BK":

0 author

445154

06e17a5a-7325-4325-8e5d-e172eba7fc5bIranian "powerless" malware path

06e17a5a-7325-4325-8e5d-e172eba7fc5b
Iranian "powerless" malware path