File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -4,9 +4,9 @@ The code provides a communication channel for the attacker and infected client.
44
55### Some artifacts are summorized below
66- Comments are in english, with a lot of grammar mistakes
7- - Subject of an email is: '** piradi nomeri** '. This is Georgian language
8- - It saves files with ** dataluri _ ** timetsamp.dat. 'Dataluri ' is also Georgian for "details".
9- - In the email body it uses the word: "** gamarjoba** ". Meaning 'Hello' in Russian and Georgian.
7+ - Subject of an email is: '** piradi nomeri** '. This means Personal Number in Georgian
8+ - It saves files with ** detaluri _ ** timetsamp.dat. 'Detaluri ' is also Georgian for "details".
9+ - In the email body it uses the word: "** gamarjoba** ". Meaning 'Hello' in Georgian.
1010
1111### These are the Gmail account details used, I've verified they once worked (but not anymore!)
1212- POP3_MAIL_IP = 'pop.gmail.com'
You can’t perform that action at this time.
0 commit comments