The key here is to pay attention to the GEO-IP stuff they are using: A summary of the C2 IP addresses: IP Address Country Port Filename 203.131.222.102 Thailand 8080 Diskpartmg16.exe igfxtrayex.exe igfxtpers.exe 217.96.33.164 Poland 8000 Diskpartmg16.exe igfxtrayex.exe 88.53.215.64 Italy 8000 Diskpartmg16.exe igfxtrayex.exe 200.87.126.116 Bolivia 8000 File 7 58.185.154.99 Singapore 8080 File 7 212.31.102.100 Cypress 8080 File 7 208.105.226.235 United States – igfxtpers.exe See now all of these IP’s could be used by just about anyone. They are not in country at the DPRK and they are not on Chinese soil either. In fact here is the dope on each one:
Posted on: Thu, 25 Dec 2014 09:06:24 +0000
Trending Topics
Recently Viewed Topics
© 2015