APT_CyberCriminal_Campagin_.../2015/2015.06.28.APT_on_Taiwan/DTL-06282015-01.pdf
CyberMonitor 7cd6ba7319 go
2017-02-11 15:00:00 +08:00

746 lines
40 KiB
Plaintext

<!DOCTYPE html>
<html lang="en" class=" is-copy-enabled">
<head prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# object: http://ogp.me/ns/object# article: http://ogp.me/ns/article# profile: http://ogp.me/ns/profile#">
<meta charset='utf-8'>
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta http-equiv="Content-Language" content="en">
<meta name="viewport" content="width=1020">
<title>IntelReports/DTL-06282015-01.pdf at master · DragonThreatLabs/IntelReports</title>
<link rel="search" type="application/opensearchdescription+xml" href="/opensearch.xml" title="GitHub">
<link rel="fluid-icon" href="https://github.com/fluidicon.png" title="GitHub">
<link rel="apple-touch-icon" sizes="57x57" href="/apple-touch-icon-114.png">
<link rel="apple-touch-icon" sizes="114x114" href="/apple-touch-icon-114.png">
<link rel="apple-touch-icon" sizes="72x72" href="/apple-touch-icon-144.png">
<link rel="apple-touch-icon" sizes="144x144" href="/apple-touch-icon-144.png">
<meta property="fb:app_id" content="1401488693436528">
<meta content="@github" name="twitter:site" /><meta content="summary" name="twitter:card" /><meta content="DragonThreatLabs/IntelReports" name="twitter:title" /><meta content="Contribute to IntelReports development by creating an account on GitHub." name="twitter:description" /><meta content="https://avatars0.githubusercontent.com/u/10483856?v=3&amp;s=400" name="twitter:image:src" />
<meta content="GitHub" property="og:site_name" /><meta content="object" property="og:type" /><meta content="https://avatars0.githubusercontent.com/u/10483856?v=3&amp;s=400" property="og:image" /><meta content="DragonThreatLabs/IntelReports" property="og:title" /><meta content="https://github.com/DragonThreatLabs/IntelReports" property="og:url" /><meta content="Contribute to IntelReports development by creating an account on GitHub." property="og:description" />
<meta name="browser-stats-url" content="https://api.github.com/_private/browser/stats">
<meta name="browser-errors-url" content="https://api.github.com/_private/browser/errors">
<link rel="assets" href="https://assets-cdn.github.com/">
<link rel="web-socket" href="wss://live.github.com/_sockets/MjAwODQ3Ojk4MTc0ZTkxMGRkMjZhM2YwZTg2YWJiYzk2YTRjY2IzOmI4NGVlZmQ0YTY4M2Q1MDgzY2Y2ZjRkZThlZmVkZWVjNDk5ZGY1ZmM4YzAwZDEwN2M0NzVkNGJiZWJmYjRkMTE=--5ba92b58aa3df092f51114a4e5f8a99228c28740">
<meta name="pjax-timeout" content="1000">
<link rel="sudo-modal" href="/sessions/sudo_modal">
<meta name="features-enabled" content="41,110">
<meta name="msapplication-TileImage" content="/windows-tile.png">
<meta name="msapplication-TileColor" content="#ffffff">
<meta name="selected-link" value="repo_source" data-pjax-transient>
<meta name="google-analytics" content="UA-3769691-2">
<meta content="collector.githubapp.com" name="octolytics-host" /><meta content="collector-cdn.github.com" name="octolytics-script-host" /><meta content="github" name="octolytics-app-id" /><meta content="4464EFE2:506B:17003CB:559931EE" name="octolytics-dimension-request_id" /><meta content="200847" name="octolytics-actor-id" /><meta content="kbandla" name="octolytics-actor-login" /><meta content="10ddf063759796b35f018ff9788753cc17cfc5bc1e2563681847e3984c666627" name="octolytics-actor-hash" />
<meta content="Rails, view, blob#show" name="analytics-event" />
<meta class="js-ga-set" name="dimension1" content="Logged In">
<meta name="is-dotcom" content="true">
<meta name="hostname" content="github.com">
<meta name="user-login" content="kbandla">
<link rel="icon" sizes="any" mask href="https://assets-cdn.github.com/pinned-octocat.svg">
<meta name="theme-color" content="#4078c0">
<link rel="icon" type="image/x-icon" href="https://assets-cdn.github.com/favicon.ico">
<meta content="authenticity_token" name="csrf-param" />
<meta content="d2XXnYKmD8MCEipDc0WTaJGunJFPDmrKgAV62rnoUGif8P+aAlEnbWGTWFg0zV2IM+Wd9oRBiNhuSIzHSdqclg==" name="csrf-token" />
<link crossorigin="anonymous" href="https://assets-cdn.github.com/assets/github/index-22aa0d08bb4823e217ae9b39a3e9a5058b77830a108a78f1f827c143efbb07f3.css" media="all" rel="stylesheet" />
<link crossorigin="anonymous" href="https://assets-cdn.github.com/assets/github2/index-811cac24dcd636252be1b3cb188119b62f861dc3f56b5036312fd3db35f53759.css" media="all" rel="stylesheet" />
<meta http-equiv="x-pjax-version" content="9869d7c8a14f7da8012751b77892179f">
<meta name="description" content="Contribute to IntelReports development by creating an account on GitHub.">
<meta name="go-import" content="github.com/DragonThreatLabs/IntelReports git https://github.com/DragonThreatLabs/IntelReports.git">
<meta content="10483856" name="octolytics-dimension-user_id" /><meta content="DragonThreatLabs" name="octolytics-dimension-user_login" /><meta content="29085801" name="octolytics-dimension-repository_id" /><meta content="DragonThreatLabs/IntelReports" name="octolytics-dimension-repository_nwo" /><meta content="true" name="octolytics-dimension-repository_public" /><meta content="false" name="octolytics-dimension-repository_is_fork" /><meta content="29085801" name="octolytics-dimension-repository_network_root_id" /><meta content="DragonThreatLabs/IntelReports" name="octolytics-dimension-repository_network_root_nwo" />
<link href="https://github.com/DragonThreatLabs/IntelReports/commits/master.atom" rel="alternate" title="Recent Commits to IntelReports:master" type="application/atom+xml">
</head>
<body class="logged_in env-production macintosh vis-public page-blob">
<a href="#start-of-content" tabindex="1" class="accessibility-aid js-skip-to-content">Skip to content</a>
<div class="wrapper">
<div class="header header-logged-in true" role="banner">
<div class="container clearfix">
<a class="header-logo-invertocat" href="https://github.com/" data-hotkey="g d" aria-label="Homepage" data-ga-click="Header, go to dashboard, icon:logo">
<span class="mega-octicon octicon-mark-github"></span>
</a>
<div class="site-search repo-scope js-site-search" role="search">
<form accept-charset="UTF-8" action="/DragonThreatLabs/IntelReports/search" class="js-site-search-form" data-global-search-url="/search" data-repo-search-url="/DragonThreatLabs/IntelReports/search" method="get"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /></div>
<label class="js-chromeless-input-container form-control">
<div class="scope-badge">This repository</div>
<input type="text"
class="js-site-search-focus js-site-search-field is-clearable chromeless-input"
data-hotkey="s"
name="q"
placeholder="Search"
data-global-scope-placeholder="Search GitHub"
data-repo-scope-placeholder="Search"
tabindex="1"
autocapitalize="off">
</label>
</form>
</div>
<ul class="header-nav left" role="navigation">
<li class="header-nav-item">
<a href="/pulls" class="js-selected-navigation-item header-nav-link" data-ga-click="Header, click, Nav menu - item:pulls context:user" data-hotkey="g p" data-selected-links="/pulls /pulls/assigned /pulls/mentioned /pulls">
Pull requests
</a> </li>
<li class="header-nav-item">
<a href="/issues" class="js-selected-navigation-item header-nav-link" data-ga-click="Header, click, Nav menu - item:issues context:user" data-hotkey="g i" data-selected-links="/issues /issues/assigned /issues/mentioned /issues">
Issues
</a> </li>
<li class="header-nav-item">
<a class="header-nav-link" href="https://gist.github.com" data-ga-click="Header, go to gist, text:gist">Gist</a>
</li>
</ul>
<ul class="header-nav user-nav right" id="user-links">
<li class="header-nav-item">
<span class="js-socket-channel js-updatable-content"
data-channel="notification-changed:kbandla"
data-url="/notifications/header">
<a href="/notifications" aria-label="You have no unread notifications" class="header-nav-link notification-indicator tooltipped tooltipped-s" data-ga-click="Header, go to notifications, icon:read" data-hotkey="g n">
<span class="mail-status all-read"></span>
<span class="octicon octicon-inbox"></span>
</a> </span>
</li>
<li class="header-nav-item dropdown js-menu-container">
<a class="header-nav-link tooltipped tooltipped-s js-menu-target" href="/new"
aria-label="Create new..."
data-ga-click="Header, create new, icon:add">
<span class="octicon octicon-plus left"></span>
<span class="dropdown-caret"></span>
</a>
<div class="dropdown-menu-content js-menu-content">
<ul class="dropdown-menu dropdown-menu-sw">
<a class="dropdown-item" href="/new" data-ga-click="Header, create new repository">
New repository
</a>
<a class="dropdown-item" href="/organizations/new" data-ga-click="Header, create new organization">
New organization
</a>
<div class="dropdown-divider"></div>
<div class="dropdown-header">
<span title="DragonThreatLabs/IntelReports">This repository</span>
</div>
<a class="dropdown-item" href="/DragonThreatLabs/IntelReports/issues/new" data-ga-click="Header, create new issue">
New issue
</a>
</ul>
</div>
</li>
<li class="header-nav-item dropdown js-menu-container">
<a class="header-nav-link name tooltipped tooltipped-s js-menu-target" href="/kbandla"
aria-label="View profile and more"
data-ga-click="Header, show menu, icon:avatar">
<img alt="@kbandla" class="avatar" height="20" src="https://avatars0.githubusercontent.com/u/200847?v=3&amp;s=40" width="20" />
<span class="dropdown-caret"></span>
</a>
<div class="dropdown-menu-content js-menu-content">
<div class="dropdown-menu dropdown-menu-sw">
<div class="dropdown-header header-nav-current-user css-truncate">
Signed in as <strong class="css-truncate-target">kbandla</strong>
</div>
<div class="dropdown-divider"></div>
<a class="dropdown-item" href="/kbandla" data-ga-click="Header, go to profile, text:your profile">
Your profile
</a>
<a class="dropdown-item" href="/stars" data-ga-click="Header, go to starred repos, text:your stars">
Your stars
</a>
<a class="dropdown-item" href="/explore" data-ga-click="Header, go to explore, text:explore">
Explore
</a>
<a class="dropdown-item" href="https://help.github.com" data-ga-click="Header, go to help, text:help">
Help
</a>
<div class="dropdown-divider"></div>
<a class="dropdown-item" href="/settings/profile" data-ga-click="Header, go to settings, icon:settings">
Settings
</a>
<form accept-charset="UTF-8" action="/logout" class="logout-form" method="post"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /><input name="authenticity_token" type="hidden" value="OOvRaWG9b4qv3s8luVPgLxBkbXIZGMSxkbBuD0D0JpRNNSXWkK3m94VesFo+3GaJcis+90U7M9m7St6pPkp03Q==" /></div>
<button class="dropdown-item dropdown-signout" data-ga-click="Header, sign out, icon:logout">
Sign out
</button>
</form> </div>
</div>
</li>
</ul>
</div>
</div>
<div id="start-of-content" class="accessibility-aid"></div>
<div class="site" itemscope itemtype="http://schema.org/WebPage">
<div id="js-flash-container">
</div>
<div class="pagehead repohead instapaper_ignore readability-menu">
<div class="container">
<ul class="pagehead-actions">
<li>
<form accept-charset="UTF-8" action="/notifications/subscribe" class="js-social-container" data-autosubmit="true" data-remote="true" method="post"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /><input name="authenticity_token" type="hidden" value="+tmwaonxMNCISnt3WdAnVaD7yPqrgwXqToJvxZ9IU52mw44e7nvw2YNkRyq7fg2J1u5UKzr5hL2BK8Q98ssNog==" /></div> <input id="repository_id" name="repository_id" type="hidden" value="29085801" />
<div class="select-menu js-menu-container js-select-menu">
<a href="/DragonThreatLabs/IntelReports/subscription"
class="btn btn-sm btn-with-count select-menu-button js-menu-target" role="button" tabindex="0" aria-haspopup="true"
data-ga-click="Repository, click Watch settings, action:blob#show">
<span class="js-select-button">
<span class="octicon octicon-eye"></span>
Watch
</span>
</a>
<a class="social-count js-social-count" href="/DragonThreatLabs/IntelReports/watchers">
5
</a>
<div class="select-menu-modal-holder">
<div class="select-menu-modal subscription-menu-modal js-menu-content" aria-hidden="true">
<div class="select-menu-header">
<span class="select-menu-title">Notifications</span>
<span class="octicon octicon-x js-menu-close" role="button" aria-label="Close"></span>
</div>
<div class="select-menu-list js-navigation-container" role="menu">
<div class="select-menu-item js-navigation-item selected" role="menuitem" tabindex="0">
<span class="select-menu-item-icon octicon octicon-check"></span>
<div class="select-menu-item-text">
<input checked="checked" id="do_included" name="do" type="radio" value="included" />
<span class="select-menu-item-heading">Not watching</span>
<span class="description">Be notified when participating or @mentioned.</span>
<span class="js-select-button-text hidden-select-button-text">
<span class="octicon octicon-eye"></span>
Watch
</span>
</div>
</div>
<div class="select-menu-item js-navigation-item " role="menuitem" tabindex="0">
<span class="select-menu-item-icon octicon octicon octicon-check"></span>
<div class="select-menu-item-text">
<input id="do_subscribed" name="do" type="radio" value="subscribed" />
<span class="select-menu-item-heading">Watching</span>
<span class="description">Be notified of all conversations.</span>
<span class="js-select-button-text hidden-select-button-text">
<span class="octicon octicon-eye"></span>
Unwatch
</span>
</div>
</div>
<div class="select-menu-item js-navigation-item " role="menuitem" tabindex="0">
<span class="select-menu-item-icon octicon octicon-check"></span>
<div class="select-menu-item-text">
<input id="do_ignore" name="do" type="radio" value="ignore" />
<span class="select-menu-item-heading">Ignoring</span>
<span class="description">Never be notified.</span>
<span class="js-select-button-text hidden-select-button-text">
<span class="octicon octicon-mute"></span>
Stop ignoring
</span>
</div>
</div>
</div>
</div>
</div>
</div>
</form>
</li>
<li>
<div class="js-toggler-container js-social-container starring-container ">
<form accept-charset="UTF-8" action="/DragonThreatLabs/IntelReports/unstar" class="js-toggler-form starred js-unstar-button" data-remote="true" method="post"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /><input name="authenticity_token" type="hidden" value="4gOH3xsAD81LAZ6dd5YVGXuE2Fd53kFZaGxCc4I3rB2S223eLMJC/r8koWSCRGMp2hDgM3AxDjrJAQOX6eNHeg==" /></div>
<button
class="btn btn-sm btn-with-count js-toggler-target"
aria-label="Unstar this repository" title="Unstar DragonThreatLabs/IntelReports"
data-ga-click="Repository, click unstar button, action:blob#show; text:Unstar">
<span class="octicon octicon-star"></span>
Unstar
</button>
<a class="social-count js-social-count" href="/DragonThreatLabs/IntelReports/stargazers">
3
</a>
</form>
<form accept-charset="UTF-8" action="/DragonThreatLabs/IntelReports/star" class="js-toggler-form unstarred js-star-button" data-remote="true" method="post"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /><input name="authenticity_token" type="hidden" value="o2l8z11oW7JA5/23FHbWl3j4JX2LvSIawGtq3Z07Ltbi7YMIDkh2DgbMAszHpWjMzAeN0dOAT+08+9vJMsQ/ww==" /></div>
<button
class="btn btn-sm btn-with-count js-toggler-target"
aria-label="Star this repository" title="Star DragonThreatLabs/IntelReports"
data-ga-click="Repository, click star button, action:blob#show; text:Star">
<span class="octicon octicon-star"></span>
Star
</button>
<a class="social-count js-social-count" href="/DragonThreatLabs/IntelReports/stargazers">
3
</a>
</form> </div>
</li>
<li>
<a href="#fork-destination-box" class="btn btn-sm btn-with-count"
title="Fork your own copy of DragonThreatLabs/IntelReports to your account"
aria-label="Fork your own copy of DragonThreatLabs/IntelReports to your account"
rel="facebox"
data-ga-click="Repository, show fork modal, action:blob#show; text:Fork">
<span class="octicon octicon-repo-forked"></span>
Fork
</a>
<a href="/DragonThreatLabs/IntelReports/network" class="social-count">0</a>
<div id="fork-destination-box" style="display: none;">
<h2 class="facebox-header">Where should we fork this repository?</h2>
<include-fragment src=""
class="js-fork-select-fragment fork-select-fragment"
data-url="/DragonThreatLabs/IntelReports/fork?fragment=1">
<img alt="Loading" height="64" src="https://assets-cdn.github.com/images/spinners/octocat-spinner-128.gif" width="64" />
</include-fragment>
</div>
</li>
</ul>
<h1 itemscope itemtype="http://data-vocabulary.org/Breadcrumb" class="entry-title public">
<span class="mega-octicon octicon-repo"></span>
<span class="author"><a href="/DragonThreatLabs" class="url fn" itemprop="url" rel="author"><span itemprop="title">DragonThreatLabs</span></a></span><!--
--><span class="path-divider">/</span><!--
--><strong><a href="/DragonThreatLabs/IntelReports" data-pjax="#js-repo-pjax-container">IntelReports</a></strong>
<span class="page-context-loader">
<img alt="" height="16" src="https://assets-cdn.github.com/images/spinners/octocat-spinner-32.gif" width="16" />
</span>
</h1>
</div><!-- /.container -->
</div><!-- /.repohead -->
<div class="container">
<div class="repository-with-sidebar repo-container new-discussion-timeline ">
<div class="repository-sidebar clearfix">
<nav class="sunken-menu repo-nav js-repo-nav js-sidenav-container-pjax js-octicon-loaders"
role="navigation"
data-pjax="#js-repo-pjax-container"
data-issue-count-url="/DragonThreatLabs/IntelReports/issues/counts">
<ul class="sunken-menu-group">
<li class="tooltipped tooltipped-w" aria-label="Code">
<a href="/DragonThreatLabs/IntelReports" aria-label="Code" class="selected js-selected-navigation-item sunken-menu-item" data-hotkey="g c" data-selected-links="repo_source repo_downloads repo_commits repo_releases repo_tags repo_branches /DragonThreatLabs/IntelReports">
<span class="octicon octicon-code"></span> <span class="full-word">Code</span>
<img alt="" class="mini-loader" height="16" src="https://assets-cdn.github.com/images/spinners/octocat-spinner-32.gif" width="16" />
</a> </li>
<li class="tooltipped tooltipped-w" aria-label="Issues">
<a href="/DragonThreatLabs/IntelReports/issues" aria-label="Issues" class="js-selected-navigation-item sunken-menu-item" data-hotkey="g i" data-selected-links="repo_issues repo_labels repo_milestones /DragonThreatLabs/IntelReports/issues">
<span class="octicon octicon-issue-opened"></span> <span class="full-word">Issues</span>
<span class="js-issue-replace-counter"></span>
<img alt="" class="mini-loader" height="16" src="https://assets-cdn.github.com/images/spinners/octocat-spinner-32.gif" width="16" />
</a> </li>
<li class="tooltipped tooltipped-w" aria-label="Pull requests">
<a href="/DragonThreatLabs/IntelReports/pulls" aria-label="Pull requests" class="js-selected-navigation-item sunken-menu-item" data-hotkey="g p" data-selected-links="repo_pulls /DragonThreatLabs/IntelReports/pulls">
<span class="octicon octicon-git-pull-request"></span> <span class="full-word">Pull requests</span>
<span class="js-pull-replace-counter"></span>
<img alt="" class="mini-loader" height="16" src="https://assets-cdn.github.com/images/spinners/octocat-spinner-32.gif" width="16" />
</a> </li>
<li class="tooltipped tooltipped-w" aria-label="Wiki">
<a href="/DragonThreatLabs/IntelReports/wiki" aria-label="Wiki" class="js-selected-navigation-item sunken-menu-item" data-hotkey="g w" data-selected-links="repo_wiki /DragonThreatLabs/IntelReports/wiki">
<span class="octicon octicon-book"></span> <span class="full-word">Wiki</span>
<img alt="" class="mini-loader" height="16" src="https://assets-cdn.github.com/images/spinners/octocat-spinner-32.gif" width="16" />
</a> </li>
</ul>
<div class="sunken-menu-separator"></div>
<ul class="sunken-menu-group">
<li class="tooltipped tooltipped-w" aria-label="Pulse">
<a href="/DragonThreatLabs/IntelReports/pulse" aria-label="Pulse" class="js-selected-navigation-item sunken-menu-item" data-selected-links="pulse /DragonThreatLabs/IntelReports/pulse">
<span class="octicon octicon-pulse"></span> <span class="full-word">Pulse</span>
<img alt="" class="mini-loader" height="16" src="https://assets-cdn.github.com/images/spinners/octocat-spinner-32.gif" width="16" />
</a> </li>
<li class="tooltipped tooltipped-w" aria-label="Graphs">
<a href="/DragonThreatLabs/IntelReports/graphs" aria-label="Graphs" class="js-selected-navigation-item sunken-menu-item" data-selected-links="repo_graphs repo_contributors /DragonThreatLabs/IntelReports/graphs">
<span class="octicon octicon-graph"></span> <span class="full-word">Graphs</span>
<img alt="" class="mini-loader" height="16" src="https://assets-cdn.github.com/images/spinners/octocat-spinner-32.gif" width="16" />
</a> </li>
</ul>
</nav>
<div class="only-with-full-nav">
<div class="js-clone-url clone-url open"
data-protocol-type="http">
<h3><span class="text-emphasized">HTTPS</span> clone URL</h3>
<div class="input-group js-zeroclipboard-container">
<input type="text" class="input-mini input-monospace js-url-field js-zeroclipboard-target"
value="https://github.com/DragonThreatLabs/IntelReports.git" readonly="readonly">
<span class="input-group-button">
<button aria-label="Copy to clipboard" class="js-zeroclipboard btn btn-sm zeroclipboard-button tooltipped tooltipped-s" data-copied-hint="Copied!" type="button"><span class="octicon octicon-clippy"></span></button>
</span>
</div>
</div>
<div class="js-clone-url clone-url "
data-protocol-type="ssh">
<h3><span class="text-emphasized">SSH</span> clone URL</h3>
<div class="input-group js-zeroclipboard-container">
<input type="text" class="input-mini input-monospace js-url-field js-zeroclipboard-target"
value="git@github.com:DragonThreatLabs/IntelReports.git" readonly="readonly">
<span class="input-group-button">
<button aria-label="Copy to clipboard" class="js-zeroclipboard btn btn-sm zeroclipboard-button tooltipped tooltipped-s" data-copied-hint="Copied!" type="button"><span class="octicon octicon-clippy"></span></button>
</span>
</div>
</div>
<div class="js-clone-url clone-url "
data-protocol-type="subversion">
<h3><span class="text-emphasized">Subversion</span> checkout URL</h3>
<div class="input-group js-zeroclipboard-container">
<input type="text" class="input-mini input-monospace js-url-field js-zeroclipboard-target"
value="https://github.com/DragonThreatLabs/IntelReports" readonly="readonly">
<span class="input-group-button">
<button aria-label="Copy to clipboard" class="js-zeroclipboard btn btn-sm zeroclipboard-button tooltipped tooltipped-s" data-copied-hint="Copied!" type="button"><span class="octicon octicon-clippy"></span></button>
</span>
</div>
</div>
<div class="clone-options">You can clone with
<form accept-charset="UTF-8" action="/users/set_protocol?protocol_selector=http&amp;protocol_type=clone" class="inline-form js-clone-selector-form is-enabled" data-remote="true" method="post"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /><input name="authenticity_token" type="hidden" value="ip0sFx04s57y7Xqm6BbiPfdH6jzoi/iW4UK7EzRViL6CCTzZLWZqIxhESd4CydFKGrEg8YDmRpwmlzIo94mNhQ==" /></div><button class="btn-link js-clone-selector" data-protocol="http" type="submit">HTTPS</button></form>, <form accept-charset="UTF-8" action="/users/set_protocol?protocol_selector=ssh&amp;protocol_type=clone" class="inline-form js-clone-selector-form is-enabled" data-remote="true" method="post"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /><input name="authenticity_token" type="hidden" value="EZtvcOJCSAtdhyvlW1pFrwGCLUcD/M9zYofgwoL5Cjk+LwnX+5u6/mIVE/OvZuY2GNt7XPKYPiYxuPUnvc0rkg==" /></div><button class="btn-link js-clone-selector" data-protocol="ssh" type="submit">SSH</button></form>, or <form accept-charset="UTF-8" action="/users/set_protocol?protocol_selector=subversion&amp;protocol_type=clone" class="inline-form js-clone-selector-form is-enabled" data-remote="true" method="post"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /><input name="authenticity_token" type="hidden" value="sfCqYkXZ9dsAGgbUiJswNikZ7yF3gN7ps6mppQrJHBFS+sA1Xi2AwdvDnoLmYoJnAcOA4DByFgEvdJrAJCKxDw==" /></div><button class="btn-link js-clone-selector" data-protocol="subversion" type="submit">Subversion</button></form>.
<a href="https://help.github.com/articles/which-remote-url-should-i-use" class="help tooltipped tooltipped-n" aria-label="Get help on which URL is right for you.">
<span class="octicon octicon-question"></span>
</a>
</div>
<a href="github-mac://openRepo/https://github.com/DragonThreatLabs/IntelReports" class="btn btn-sm sidebar-button" title="Save DragonThreatLabs/IntelReports to your computer and use it in GitHub Desktop." aria-label="Save DragonThreatLabs/IntelReports to your computer and use it in GitHub Desktop.">
<span class="octicon octicon-device-desktop"></span>
Clone in Desktop
</a>
<a href="/DragonThreatLabs/IntelReports/archive/master.zip"
class="btn btn-sm sidebar-button"
aria-label="Download the contents of DragonThreatLabs/IntelReports as a zip file"
title="Download the contents of DragonThreatLabs/IntelReports as a zip file"
rel="nofollow">
<span class="octicon octicon-cloud-download"></span>
Download ZIP
</a>
</div>
</div><!-- /.repository-sidebar -->
<div id="js-repo-pjax-container" class="repository-content context-loader-container" data-pjax-container>
<a href="/DragonThreatLabs/IntelReports/blob/67f3b4713185f11729512cb2f7b9ece96643ba77/DTL-06282015-01.pdf" class="hidden js-permalink-shortcut" data-hotkey="y">Permalink</a>
<!-- blob contrib key: blob_contributors:v21:b152e49add1cfecd67f8ba47ce3774f1 -->
<div class="file-navigation js-zeroclipboard-container">
<div class="select-menu js-menu-container js-select-menu left">
<span class="btn btn-sm select-menu-button js-menu-target css-truncate" data-hotkey="w"
data-ref="master"
title="master"
role="button" aria-label="Switch branches or tags" tabindex="0" aria-haspopup="true">
<span class="octicon octicon-git-branch"></span>
<i>branch:</i>
<span class="js-select-button css-truncate-target">master</span>
</span>
<div class="select-menu-modal-holder js-menu-content js-navigation-container" data-pjax aria-hidden="true">
<div class="select-menu-modal">
<div class="select-menu-header">
<span class="select-menu-title">Switch branches/tags</span>
<span class="octicon octicon-x js-menu-close" role="button" aria-label="Close"></span>
</div>
<div class="select-menu-filters">
<div class="select-menu-text-filter">
<input type="text" aria-label="Filter branches/tags" id="context-commitish-filter-field" class="js-filterable-field js-navigation-enable" placeholder="Filter branches/tags">
</div>
<div class="select-menu-tabs">
<ul>
<li class="select-menu-tab">
<a href="#" data-tab-filter="branches" data-filter-placeholder="Filter branches/tags" class="js-select-menu-tab">Branches</a>
</li>
<li class="select-menu-tab">
<a href="#" data-tab-filter="tags" data-filter-placeholder="Find a tag…" class="js-select-menu-tab">Tags</a>
</li>
</ul>
</div>
</div>
<div class="select-menu-list select-menu-tab-bucket js-select-menu-tab-bucket" data-tab-filter="branches">
<div data-filterable-for="context-commitish-filter-field" data-filterable-type="substring">
<a class="select-menu-item js-navigation-item js-navigation-open selected"
href="/DragonThreatLabs/IntelReports/blob/master/DTL-06282015-01.pdf"
data-name="master"
data-skip-pjax="true"
rel="nofollow">
<span class="select-menu-item-icon octicon octicon-check"></span>
<span class="select-menu-item-text css-truncate-target" title="master">
master
</span>
</a>
</div>
<div class="select-menu-no-results">Nothing to show</div>
</div>
<div class="select-menu-list select-menu-tab-bucket js-select-menu-tab-bucket" data-tab-filter="tags">
<div data-filterable-for="context-commitish-filter-field" data-filterable-type="substring">
</div>
<div class="select-menu-no-results">Nothing to show</div>
</div>
</div>
</div>
</div>
<div class="btn-group right">
<a href="/DragonThreatLabs/IntelReports/find/master"
class="js-show-file-finder btn btn-sm empty-icon tooltipped tooltipped-s"
data-pjax
data-hotkey="t"
aria-label="Quickly jump between files">
<span class="octicon octicon-list-unordered"></span>
</a>
<button aria-label="Copy file path to clipboard" class="js-zeroclipboard btn btn-sm zeroclipboard-button tooltipped tooltipped-s" data-copied-hint="Copied!" type="button"><span class="octicon octicon-clippy"></span></button>
</div>
<div class="breadcrumb js-zeroclipboard-target">
<span class="repo-root js-repo-root"><span itemscope="" itemtype="http://data-vocabulary.org/Breadcrumb"><a href="/DragonThreatLabs/IntelReports" class="" data-branch="master" data-pjax="true" itemscope="url"><span itemprop="title">IntelReports</span></a></span></span><span class="separator">/</span><strong class="final-path">DTL-06282015-01.pdf</strong>
</div>
</div>
<div class="commit file-history-tease">
<div class="file-history-tease-header">
<img alt="@dkelly2e" class="avatar" height="24" src="https://avatars2.githubusercontent.com/u/7058026?v=3&amp;s=48" width="24" />
<span class="author"><a href="/dkelly2e" rel="contributor">dkelly2e</a></span>
<time datetime="2015-07-03T15:28:36Z" is="relative-time">Jul 3, 2015</time>
<div class="commit-title">
<a href="/DragonThreatLabs/IntelReports/commit/67f3b4713185f11729512cb2f7b9ece96643ba77" class="message" data-pjax="true" title="DTL-06282015-01.pdf">DTL-06282015-01.pdf</a>
</div>
</div>
<div class="participation">
<p class="quickstat">
<a href="#blob_contributors_box" rel="facebox">
<strong>1</strong>
contributor
</a>
</p>
</div>
<div id="blob_contributors_box" style="display:none">
<h2 class="facebox-header">Users who have contributed to this file</h2>
<ul class="facebox-user-list">
<li class="facebox-user-list-item">
<img alt="@dkelly2e" height="24" src="https://avatars2.githubusercontent.com/u/7058026?v=3&amp;s=48" width="24" />
<a href="/dkelly2e">dkelly2e</a>
</li>
</ul>
</div>
</div>
<div class="file">
<div class="file-header">
<div class="file-actions">
<div class="btn-group">
<a href="/DragonThreatLabs/IntelReports/raw/master/DTL-06282015-01.pdf" class="btn btn-sm " id="raw-url">Raw</a>
<a href="/DragonThreatLabs/IntelReports/commits/master/DTL-06282015-01.pdf" class="btn btn-sm " rel="nofollow">History</a>
</div>
<a class="octicon-btn tooltipped tooltipped-nw"
href="github-mac://openRepo/https://github.com/DragonThreatLabs/IntelReports?branch=master&amp;filepath=DTL-06282015-01.pdf"
aria-label="Open this file in GitHub for Mac"
data-ga-click="Repository, open with desktop, type:mac">
<span class="octicon octicon-device-desktop"></span>
</a>
<form accept-charset="UTF-8" action="/DragonThreatLabs/IntelReports/delete/master/DTL-06282015-01.pdf" class="inline-form" method="post"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /><input name="authenticity_token" type="hidden" value="0A+4RJNp8FwiCCGM8aGqM1eRbiHEBPE5igrlo8D5rPXHg8Fn8jMvY3eB7wHCV7Vw1HLbg7PDXx1QetdERgBibA==" /></div>
<button class="octicon-btn octicon-btn-danger tooltipped tooltipped-n" type="submit" aria-label="Fork this project and delete this file" data-disable-with>
<span class="octicon octicon-trashcan"></span>
</button>
</form> </div>
<div class="file-info">
882.759 kB
</div>
</div>
<div class="blob-wrapper data type-text">
<div class="render-wrapper">
<div class="render-container is-render-pending js-render-target "
data-identity="64292479-bcd1-4993-be29-8fe5faa32c29"
data-host="https://render.githubusercontent.com"
data-type="pdf">
<img alt="" class="octospinner" height="64" src="https://assets-cdn.github.com/images/spinners/octocat-spinner-128.gif" width="64" />
<div class="render-viewer-error">Sorry, something went wrong. <a href="https://github.com/DragonThreatLabs/IntelReports/blob/master/DTL-06282015-01.pdf">Reload?</a></div>
<div class="render-viewer-fatal">Sorry, we cannot display this file.</div>
<div class="render-viewer-invalid">Sorry, this file is invalid so it cannot be displayed.</div>
<iframe class="render-viewer" src="https://render.githubusercontent.com/view/pdf?commit=67f3b4713185f11729512cb2f7b9ece96643ba77&amp;nwo=DragonThreatLabs%2FIntelReports&amp;path=DTL-06282015-01.pdf&amp;url=https%3A%2F%2Fraw.githubusercontent.com%2FDragonThreatLabs%2FIntelReports%2F67f3b4713185f11729512cb2f7b9ece96643ba77%2FDTL-06282015-01.pdf#64292479-bcd1-4993-be29-8fe5faa32c29" sandbox="allow-scripts allow-same-origin allow-top-navigation">Viewer requires iframe.</iframe>
</div>
</div>
</div>
</div>
<a href="#jump-to-line" rel="facebox[.linejump]" data-hotkey="l" style="display:none">Jump to Line</a>
<div id="jump-to-line" style="display:none">
<form accept-charset="UTF-8" action="" class="js-jump-to-line-form" method="get"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /></div>
<input class="linejump-input js-jump-to-line-field" type="text" placeholder="Jump to line&hellip;" autofocus>
<button type="submit" class="btn">Go</button>
</form></div>
</div>
</div><!-- /.repo-container -->
<div class="modal-backdrop"></div>
</div><!-- /.container -->
</div><!-- /.site -->
</div><!-- /.wrapper -->
<div class="container">
<div class="site-footer" role="contentinfo">
<ul class="site-footer-links right">
<li><a href="https://status.github.com/" data-ga-click="Footer, go to status, text:status">Status</a></li>
<li><a href="https://developer.github.com" data-ga-click="Footer, go to api, text:api">API</a></li>
<li><a href="https://training.github.com" data-ga-click="Footer, go to training, text:training">Training</a></li>
<li><a href="https://shop.github.com" data-ga-click="Footer, go to shop, text:shop">Shop</a></li>
<li><a href="https://github.com/blog" data-ga-click="Footer, go to blog, text:blog">Blog</a></li>
<li><a href="https://github.com/about" data-ga-click="Footer, go to about, text:about">About</a></li>
<li><a href="https://help.github.com" data-ga-click="Footer, go to help, text:help">Help</a></li>
</ul>
<a href="https://github.com" aria-label="Homepage">
<span class="mega-octicon octicon-mark-github" title="GitHub"></span>
</a>
<ul class="site-footer-links">
<li>&copy; 2015 <span title="0.08448s from github-fe128-cp1-prd.iad.github.net">GitHub</span>, Inc.</li>
<li><a href="https://github.com/site/terms" data-ga-click="Footer, go to terms, text:terms">Terms</a></li>
<li><a href="https://github.com/site/privacy" data-ga-click="Footer, go to privacy, text:privacy">Privacy</a></li>
<li><a href="https://github.com/security" data-ga-click="Footer, go to security, text:security">Security</a></li>
<li><a href="https://github.com/contact" data-ga-click="Footer, go to contact, text:contact">Contact</a></li>
</ul>
</div>
</div>
<div class="fullscreen-overlay js-fullscreen-overlay" id="fullscreen_overlay">
<div class="fullscreen-container js-suggester-container">
<div class="textarea-wrap">
<textarea name="fullscreen-contents" id="fullscreen-contents" class="fullscreen-contents js-fullscreen-contents" placeholder=""></textarea>
<div class="suggester-container">
<div class="suggester fullscreen-suggester js-suggester js-navigation-container"></div>
</div>
</div>
</div>
<div class="fullscreen-sidebar">
<a href="#" class="exit-fullscreen js-exit-fullscreen tooltipped tooltipped-w" aria-label="Exit Zen Mode">
<span class="mega-octicon octicon-screen-normal"></span>
</a>
<a href="#" class="theme-switcher js-theme-switcher tooltipped tooltipped-w"
aria-label="Switch themes">
<span class="octicon octicon-color-mode"></span>
</a>
</div>
</div>
<div id="ajax-error-message" class="flash flash-error">
<span class="octicon octicon-alert"></span>
<a href="#" class="octicon octicon-x flash-close js-ajax-error-dismiss" aria-label="Dismiss error"></a>
Something went wrong with that request. Please try again.
</div>
<script crossorigin="anonymous" src="https://assets-cdn.github.com/assets/frameworks-3241a40a58a82e21daef3dd3cdca01bde189158793c1b6f9193fff2b5293cd1d.js"></script>
<script async="async" crossorigin="anonymous" src="https://assets-cdn.github.com/assets/github/index-31925ab956077cfff2337b41d019a66f951dc00b6f22a21f9a814cd4a9afb43b.js"></script>
</body>
</html>