APT29APT29_2012-02_FSecure_Cozyduke APT29_2012-02_FSecure_CozydukeCozyDuke CozyDuke00F67DEB6E435C68F8A39336C9EFFC45D395B1346761106f816313394a653db5172dc48737ceea0922d1177a9de74f4858678acf6afd22706489fcca35a509bca9688cb7 CozyDuke01D3973E1BB46E2B75034736991C567862A112635b4250a6bb4c6915ce962d489ee912d6637cabc343e3ed5b447dccb13aa7caf4d3a3eb3cd617d360167f270ec34596ea CozyDuke04AEFBF1527536159D72D20DEA907CBD080793E31a42acbdb285a7fba17f95068822ea4e4464c945c88ac9a4a22e86f0922f18c164e87f26c3f3fa054eb488fdd7d4bfc8 CozyDuke210BC99275368DF7EA179055737CFFC3A12A6614d9703d014c5d4f55e2996f3573544476f16cfb7e54a11689fc1a37145b7ff28f17a1930c74324650e9a080ac87d69ac7 CozyDuke23E20C523B9970686D913360D438C88E6067C157f0a6436ffee12558a434a0fc24b3b33f5f827730c7bd155997121f023ca9775077a37a58111738fcb3213757170bd860 CozyDuke29A91E7823046F4EC3FD6B3FD1B442EAA92F356552474b705610245f67bbd1c86ab8bd7bf9987e6be134bf29458a336a76600a267e14b07a57032b6a8fc656f750e40ce5 CozyDuke31163D35C5A3CAA5E82E1D9B0D1B4DB8FBDD79FA9f612661000605c5d0787fe13746e4cc363bf9a64718ae7af673f199b04b90abd5196b176932091927f6386271912442 CozyDuke32B0C8C46F8BAABA0159967C5602F58DD73EBDE90e0182694c381f8b68afc5f3ff4c4653c1b19af1e354f13c90163780be6ad50f02d5bf8bac1c9cc1eab1377a159de1be CozyDuke33BEB7A410F1CD699733000B5B30B5E4EB2062BA330ed7549d50bdb56497a5577132610a907a743b5d1d028f9bfb5f053311b0f8be8516cb97dbc48ac0511de9c41d3c32 CozyDuke3583647EF8158E29E3C18413ECE70C2851720926992d2386998566a2a95c2affbfe3f3fe73b7d89340126a441e483229deefb017c8c680d0c8f571c55744e6141576f68a CozyDuke42CFE068B0F476198B93393840D400424FD77F0Cd596827d48a3ff836545b3a999f2c3e30dc7438be5b21a36651de0a08361b18d76f0920517a7d51f75dc234740f392ca CozyDuke443BC2E77B10AE64AF6321C2C7BFD311C0772503b4ae6966e65e47afa41610b1fb554607b75cc5e0ad70347b3fad6c3e3b6b2bd224ec75e6ea9c906f01b53af58b52f038 CozyDuke44406A80F13045442CE6A28EE62A923AC8F8C56A01a2c13c42f1a0557421d341f41654237188e3a11c12e48098fb24aa288068ff5dabeff8ba88b138c20811ef751d5f07 CozyDuke482D1624F9450CA1C99926CEEC2606260E7CE544fd8e27f820bdbdf6cb80a46c67fd978af7f4d18dbc0b822b89ba14ffea24114f92b593be0f287f300bb269b310883039 CozyDuke49FB759D133EEAAB3FCC78CEC64418E44ED649AB08709ef0e3d467ce843af4deb77d74d5bc7bcb663477238508ce8ad366cc9a77811c7f5eabaec47175858fe972639f40 CozyDuke4A16674C799FAE6535C82F878F6A37F94EE9A49B5fa3c3dabb8edd601302d9cf02db899d0d5d39ad12361b6ea6b3856e55a63cad4611c7b49795b1f2a517621de298e4fa CozyDuke5150174A4D5E5BB0BCCC568E82DBB864064875102ef51f1ca11ce73fa20b54a5886ad1dd89996b66d5a339939b2072d29675ec3ca6d793f42a5d335a8ea7dab8773321ef CozyDuke5BCD74E0C3C661580201E7D8122D7525A1480B4C859f167704b5c138ed9a9d4d3fdc0723f99efa337e1b7cef4e68570a23da9183526c3db72c6410d41f63e38c8b515466 CozyDuke5FFE420A3CC848024884DB8E2CFED68C47368DAE5eabc9c54b73fffb5f3fddb37a653d7b9d047bd757faff57539c885d46fdf8e7db383d850b355d7a829a203c9184def4 CozyDuke6B5EF7B76B35203DD323AF49BFA27CFA7E1B6376c42bf27579eaadfa080134f3400a417bfbbcac3f053a480ca28cc2910c74846af7efb0b291cbe006cf15c612986e5d2c CozyDuke71C59EAA445346251467942BAC489A9D4E807F7F69cab1853df0749d42b68bf41d78e655c3329be592d90fdc0383d05ae9c251b3387f366f2aeb57ac595a5538aea0bfd9 CozyDuke75AEAEE253B5C8AE701195E3B0F49308F3D1D93295b3ec0a4e539efaa1faa3d4e25d51de7fd72a36f7e0e6e0a8bc777fc9ed41e0a6d5526c98bc95a09e189531cf7e70d5 CozyDuke7765A0869530C1A17B8FD339BBE55CC4C1BDBA305ebce6cbedfec82f1428c3409e3df0ef89cd924e6bb24ea151ba653573c64f07b22802473ea94c63c2c94843172998d6 CozyDuke78E9960CC5819583FB98FB619B33BFF7768EE861181a88c911b10d0fcb4682ae552c0de3a5373b33ac970dedeb52528b123959145bf51c95b159a30a7823ad8018ac4b41 CozyDuke7C710CF31F20EF7E0AD1809672255D4EDFDFF05283acacbd57997f6326817f709f8578936e7f6146b428af5eaec4dec1616df980764110120ae54bb765ae662c87496d50 CozyDuke87668D14910C1E1BB8BBEA0C6363F76E664DCD09f58a4369b8176edbde4396dc977c900830c69d91247f8a72a69e4d7c4bce3eafba40975e5890c23dc4dbe7c9a11afa73 CozyDuke883292F00E5836F99A1943A6E0164D8C6C124478bc626c8f11ed753f33ad1c0fe848d8988853979fce0f767b495abd55b696203209e95f04aaefe16c52c1724d07972154 CozyDuke8B357FF017DF3ED882B278D0DBBDF129235D123D3d3363598f87c78826c859077606e51401468b1d3e089985a4ed255b6594d24863cfd94a647329c631e4f4e52759f8a9 CozyDuke8BA7932A40008881A4ED975F52271C0B679EAFF245d6515ebb7f57404b8703f1e77a461a99f53b96a264b56542cd0f7c631339f8a3f3bdd3817fc9fddcdf44edd91ea90e CozyDuke8C3ED0BBDC77AEC299C77F666C21659840F5CE23e8510a7ae4919a3fcedad985fbbca35218c0b02776487babbf6219cdaf97cbf2b534e0cf87a527228dda2d4a468a257f CozyDuke8F1AC45360196A7B5A1680FF839A131394E9D9B49e3c39aaa240da8c7002924170019f7884a941d828813301c2634c6a818b9d7455c6493a073a0646d9a4e263a5a0e082 CozyDuke9319BF72000F8E468C182947DD5C82FB8B9AE4191ff0ed11fc6a41db458a75ae71670f94509347f4a5b81a65e327363b9eb6773d57cb6df0c834bfdb19eda8defcfecadb CozyDuke93D53BE2C3E7961BC01E0BFA5065A2390305268C90bd910ee161b71c7a37ac642f910059ff9edb92ee8125519aa1eea60cab9999bcd4caa87b891882caddc73a2a5ae9cf CozyDuke93EE1C714FAD9CC1BF2CBA19F3DE9D1E83C665E2f02da961eb7b87b41aee5fd9537022f0ac4ffc7a2ba8840a20f6b07aa44328f1802b79ced6a56b3ac7e78fa1178ba65a CozyDuke94520B93510DB0DC10387A65E0A46F45AB50122650992eefe5df1c85dde85dc008b5010d64533e377bc50faa161ebf98639385c119de07dd22ed2525b26bfba608e4da95 CozyDuke9B56155B82F14000F0EC027F29FF20E6AE5205C29ad55b83f2eec0c19873a770b0c86a2f7cdb9c2e8b6ca7f0a683a39c0bdadc7a512cff5d8264fdec012c541fd19c0522 CozyDuke9F8F1672594A6FBAC43793C857DD7718E75F328Ac79bf9a04913a5018ab8de65ffd1060f463e19dfd8dc9a2712deb50ccbe2bf59693cee322fb6f0d45d333e34fe4a3d45 CozyDukeA38EA2533E3DFA6339726AAFD4BC2BC7E3EEC5296f535a0f5c7f710ec4739e52f35a567395f8e91fb2059954866e52459cb88f5ff7b2aea590fce587e51f1140222ef27f CozyDukeAC2B5928F46069111F4334F650A7DBF1B5F026D5fef254d6c46fdced294db44acef8d839da3ee90d5ae8b82775567bc35896f7752b5f9a1eb686feb2e32f376e8e936e7a CozyDukeB26BC0A3E35C474F7099BD2B066F1680F3394B1466d2b5ed8646a0ef38eef822555b98286b31c287e93d7d4a5a92a5ad50ee903534af4ee34ed2879b002b139eaed7510d CozyDukeB5E973DF0A159AB583FC8923C796C8CBF5B535DF864bb9137f6bf94e59fbaa9b21065d1e6b8d05118610f97f7fee199e29c193ef763f344b425a01b6cf471ec591ad4280 CozyDukeBDD2BAE83C3BAB9BA0C199492FE57E70C6425DD3416db420e781c709bb71acee0b79282f4bcb2a5d99297b30f8ff00e08cf7330d5e2f69fc602bb317bf8e9f703a137a99 CozyDukeBF265227F9A8E22EA1C0035AC4D2449CEED43E2B1dde02ff744fa4e261168e2008fd613a418a21d49fe5bca8a3e050f039a0e2aa03db6d2de0fb49e3ff9d987f31b22dda CozyDukeBF9D3A45273608CAF90084C1157DE2074322A23043c012086c1ae0a67c38b0926d6cba3f3dea35172449f0b9a86dff9af3b4480cc4c37a30e8cb54963ff91c4c1ffe7b0d CozyDukeC117608DAB3AB632DE8110F8981DD7E773C61D052aabd78ef11926d7b562fd0d91e68ad3f9ff78669e4b251ac1e31076eaf420bee6f2060dbc926cc33603f893658ca86c CozyDukeC3D8A548FA0525E1E55AA592E14303FC6964D28Df16dff8ec8702518471f637eb5313ab22b160b7eef5ce5fdb83889f96fc40cbbbc7b85450ff2afdf781a8eb5d6a0f541 CozyDukeC3FDE950FE7D668805B40B1680D519F20C18B899f16629ad4bc9473ef4978d6a3dd551f1ea8357db1071cda3e9a63592e584410d071673433a89215c220e0e7310729229 CozyDukeC62E840FFE4BBA50F6584B33A877475F0EBCF55810b852b9f669aa6ec60bc838dbee6de3aaea9387a63a20aed6e41029ea14af41a76e09069fd3aa7f7fa210f540f42b9a CozyDukeC6472898E9085E563CD56BAEB6B6E21928C5486D98a6484533fa12a9ba6b1bd9df1899dc9891b5586cede16aa1e1b87380621f68e8956b991cf7675bbe18d2ec61a7522f CozyDukeC8FE2296565C211E019CDAD3918A5736D4B12D4493176df76e351b3ea829e0e6c6832bdf950c8f9dbec3a2a1603f9202408cf49ea5a9573c7296e5940a42581cbd6fc8c2 CozyDukeCCF83CD713E0F078697F9E842A06D624F8B9757Eacffb2823fc655637657dcbd25f35af8262dbadca239e5259161130ac9f0f5ef50691fd9dc3e3490b6c0d7b76e7ee34e CozyDukeCE9D077349638FFD3E1AD68CDA76C12CFB0240694121414c63079b7fa836be00f8d0a93bfde146d9d8c42d3b7803285bfa73976b81234f9ef37a16f9319929ec1e686bb3 CozyDukeCEBCF2F495C3B95138128D0577DCAC5CDE29490D3a746f525877b3d006758def2957ddaf4d5d056e501bc3fca73a156b23e05612bd2fc7f09b44745766b98b6ca2599bfb CozyDukeD3254F1F4C4DEF8C023982DFB28FA31E91B69AB5cb52ba412736c9966c02265946b0fdb09d217fc19800472327465066f4cf369df9ef9c43dd3822af1d7cda79c74e7793 CozyDukeD5CBF554E4E700B37DDCB026D4407FCD87032D873dce9f631cc0b8a1b1bdc1b4671e25696928d9fda1b31c72067ba2a1d3f21efe8595f6e8d54a196ccabbc953f10b2d38 CozyDukeE0779AC6E5CC76E91FCA71EFEADE2A5D7F099C80209a4a102a977b698544c99d8236e9ca86056f462d5783604b7f050047db210ecf698e72f3664b27d58265663ff5b324 CozyDukeE76DA232EC020D133530FDD52FFCC38B7C1D766262c4ce93050e48d623569c7dcc4d0278f44bead117d2cf34b8e50b81c82fbd1b938b94387cdf84386ace46b1f3b5df1a CozyDukeE99A03EBE3462D2399F1B819F48384F6714DCBA11a262a7bfecd981d7874633f41ea5de8099524703c250d1d1a16288dbd2f425d6cd0491f608e207a82f239b39bb26b7e CozyDukeEA0CFE60A7B7168C42C0E86E15FEB5B0C9674029eb22b99d44223866e24872d80a4ddefdf722677df4fb7eb4ac986a944d4f6630b91ac22b31f8d39ec9bf941376d5d4db CozyDukeEB851ADFADA7B40FC4F6C0AE348694500F878493b5553645fe819a93aafe2894da13dae71a7239c006a3adf893bdb5c2300b2964ed8bb454e1b622853e4460707dc63c16 CozyDukeF2FFC4E1D5FAEC0B7C03A233524BB78E44F0E50B9f65e3b320ec91380ebc28d4fdff48958a5d8d103cb175d7dc41932ef9a890997e25dbe15f94ecd2105835fe49779354 CozyDukeF33C980D4B6AAAB1DC401226AB452CE840AD4F407f6bca4f08c63e597bed969f5b729c5665fa52f632e4e83ff83120c7df6b90291025a76d5daeb183e814ec0b3bd2bd4e CozyDukeF7693E5D39DB067D97CD91FB22522F94C59FDA3D90674c3cca487fedbe77c4986d0232968cc0f8322ce5f546cdccac553420a8ff9784212c5aada89c04a8ec2c5324f983 CozyDukeF7D47C38ECA7EC68AA478C06B1BA983D9BF02E15a5d6ad8ad82c266fda96e076335a50807ed2d1aceab5f54df4acca63b5d269842d49521e13bab5e652237667c7eef261 APT29_2012-02_FSecure_CozydukeCozyDukeDropper CozyDukeDropper0E0182694C381F8B68AFC5F3FF4C46530e0182694c381f8b68afc5f3ff4c4653c1b19af1e354f13c90163780be6ad50f02d5bf8bac1c9cc1eab1377a159de1be CozyDukeDropper181A88C911B10D0FCB4682AE552C0DE3181a88c911b10d0fcb4682ae552c0de3a5373b33ac970dedeb52528b123959145bf51c95b159a30a7823ad8018ac4b41 CozyDukeDropper1DDE02FF744FA4E261168E2008FD613A1dde02ff744fa4e261168e2008fd613a418a21d49fe5bca8a3e050f039a0e2aa03db6d2de0fb49e3ff9d987f31b22dda CozyDukeDropper4121414C63079B7FA836BE00F8D0A93B4121414c63079b7fa836be00f8d0a93bfde146d9d8c42d3b7803285bfa73976b81234f9ef37a16f9319929ec1e686bb3 CozyDukeDropper43C012086C1AE0A67C38B0926D6CBA3F43c012086c1ae0a67c38b0926d6cba3f3dea35172449f0b9a86dff9af3b4480cc4c37a30e8cb54963ff91c4c1ffe7b0d CozyDukeDropper91AAF47843A34A9D8D1BB715A6D4ACEC91aaf47843a34a9d8d1bb715a6d4acecdc70d3046b59785b2b9b7091e26f2484ba7a488dba420a8a05be388a337c399e CozyDukeDropper95B3EC0A4E539EFAA1FAA3D4E25D51DE95b3ec0a4e539efaa1faa3d4e25d51de7fd72a36f7e0e6e0a8bc777fc9ed41e0a6d5526c98bc95a09e189531cf7e70d5 CozyDukeDropper9AD55B83F2EEC0C19873A770B0C86A2F9ad55b83f2eec0c19873a770b0c86a2f7cdb9c2e8b6ca7f0a683a39c0bdadc7a512cff5d8264fdec012c541fd19c0522 CozyDukeDropper9F65E3B320EC91380EBC28D4FDFF48959f65e3b320ec91380ebc28d4fdff48958a5d8d103cb175d7dc41932ef9a890997e25dbe15f94ecd2105835fe49779354 CozyDukeDropperEB22B99D44223866E24872D80A4DDEFDeb22b99d44223866e24872d80a4ddefdf722677df4fb7eb4ac986a944d4f6630b91ac22b31f8d39ec9bf941376d5d4db CozyDukeDropperF58A4369B8176EDBDE4396DC977C9008f58a4369b8176edbde4396dc977c900830c69d91247f8a72a69e4d7c4bce3eafba40975e5890c23dc4dbe7c9a11afa73 CozyDukeDropperFEF254D6C46FDCED294DB44ACEF8D839fef254d6c46fdced294db44acef8d839da3ee90d5ae8b82775567bc35896f7752b5f9a1eb686feb2e32f376e8e936e7a APT29APT29_2013-02_Crysys_Miniduke Indicators APT29_2013-02_Crysys_Miniduke IndicatorsDocument_Droppers Document_Droppers2402C2DC6ACC5A8418201FEA5B2043F985E1DD69_EUAG_report.pdf_cf5a5239ada9b43592757c0d7bf661695fbe3c1075e1afb6c1a3ce757bb8d401e1b1f61db42902cb72fd7b85e4e5f1a5 Document_Droppers5951EEF7C336E442C95F247AB2ECC4895F5D3E45_report.pdf_0cdf55626e56ffbf1b198beb4f6ed55959b62e650a437032886e1cc74dd7cdf0abab5ee6bc85fb4aa18568733aa89370 Document_DroppersADCB57BCE7FBB5E076F3272990BEDEE1D9544EE5_EUAG_report.pdf__3f301758aa3d5d123a9ddbad1890853b8a844864e62650905fc438f6291fa64ae2d3822054cc8354c44a923d5364905e Document_DroppersDD2C3592281EC09602AAA8488EB2F4509F75EF81_The 2013 Armenian Economic Association.pdf_c03bcb0cde62b3f45b4d772ab635e2b0da7f82d0c80c7d95d787185c04ecc116062bc655e513eaf1ccb4a1423bdbd289 Document_DroppersFBC3856FD689E1AC0F8FB56BBD7D0A2B8332A928_ASEM_Seminar.pdf_88292d7181514fda5390292d73da28d4784d1ebd1faccec27f98970cc266859eaf5676da1c451e3304fb55435d8c8473 Document_DroppersFC53525F4E2E5B8EBE86778C20FD8916612CFD29_action_plan.pdf_3668b018b4bb080d1875aee346e3650a5b21100b828b77758bfd6495c924e71f8bbd890c78d07067928bd7beccae087e APT29_2013-02_Crysys_Miniduke IndicatorsStage2 Stage2109E1E387F8B2BB8D92F45E79881809384E9AE54d39f2202b421561cfc36a8802184685ce8d7b9fc80a87688fe6c6515117a6ebd96cfaea72a6bddb4bdc05404869f5f26 Stage21BA5BCD62ABCBFF517A4ADB2609F721DD7F609DF48bbce47e4d2d51811ea99d5a771cd1a1f19bd932336fa721e739b32c07b67c01ea4bd0ebc70e92a70f41e51f4668a0a Stage21E6B9414FCE4277207AAB2AA12E4F0842A23F9C1a4ad6b55b1bc9e16123de1388f6ef9bf7889fbd40f65cfe21d0c7486b29eb4c5042abff4ac660c12c7936831445cfd6e Stage2223C7EB7B9DDE08EE028BBA6552409EE144DB54Aa67ad3e2a020f690d892b727102a759b35c08566dc38ad65e906b3683ace98e5beef855aeedc611a0317a72eee193539 Stage228A43EAC3BE1B96C68A1E7463AE91367434A2AC4297ef5bf99b5e4fd413f3755ba6aad79c60621e82f58b5ea5b36cde40889a076cb2c7f1612144998b1d388200bc7e295 Stage2296FD4C5B4BF8EA288F45B4801512D7DEC7C497Bb8e89f9908262b5385623c0e39d6b9408e28dcf7fd7ce1ad9a65c186e09a7843ee31af924509148f085958cadfdda8fb Stage22CEAE0F5F3EFE366EBDED0A413E5EA264FBF2A33441ee6a307e672c24d334d66cd7b2e1af4b01a3a299b09d2b4418cb66e80c34e3ec04016ed27199c472515cf95a023d0 Stage230B377E7DC2418607D8CF5D01AE1F925EAB2F0372dcd049c591644e35102921a48799975354786c5df71cd090c96d1328b4e31cd28b8ddc77904863d100b6c35ad235b69 Stage231AB6830F4E39C2C520AE55D4C4BFFE0B347C947ffefe16d581340c1e49f585a576a1fd8764f8c8f8832954c99fb0c2ac5ac5d89506dc5dc50310c9112318b75e9f9e2bf Stage2352A2CF4BB2C9E300CE9A51740F238C9282CA6E47049aa581874752093bb98850ff45dac889fffd6f073755742324757394a6cbca41f72562af846105b51007855149903 Stage236B969C1B3C46953077E4AABB75BE8CC6AA6A327ab2d8a0d5b03d40f148f2f907b55f9f155265193d63d56553e8e135e9a60d7d7c13cbf9d82ac25f84306ec98d74725b0 Stage243FA0D5A30B4CD72BB7E156C00C1611BB4F4BD0Ab100d530d67cfbe76394bb01605673829c13a32033bc7dd06016651b0f21a2bed9be1dc40c6879f925c71e05f4f1c8f7 Stage24EC769C15A9E318D41FD4A1997EC13C029976FC205d10323111f02233163a6742556c97462a2df9d001d3e0f222d77b6781eb279761f1354570773ef1929a86557a11454 Stage253140342B8FE2DD7661FCE0D0E88D909F55099DBe990e0d1ee90cd10c4be7bfde6cc3e5acc6ad212f50e0a7a708bb1b63a01d8932f471618cdda69b2e12106ae112b2415 Stage25551408323086F31D9BC3358AB5B2ED4DDE86C5Dfdc96d77af6fdae487002e32d61df123c150dc87a29f23f909498fc13107187416618cacdfe0ecdf6976bf2a2632e82e Stage25ACAEA49540635670036DC626503431B5A783B56c519eef57001ad3ae60cdcb0009bf778acd886fa7b9117807f1e11f0f38b9fad1afce51aa9cfbe3810a39d883d0ca663 Stage2634A1649995309B9C7D163AF627F7E39F42D5968b8088f6594dd8cba31b4f52a2d91f40e5569b85532adb1e637f83c997910924345f10aa9c2948b3d26be13eec6cbeb8b Stage2683104D28BD5C52C53D2E6C710A7BD19676C28B8e1a659473ae1e828508309b77da13783830ee990a6d4aaf00bb051704c93b468792561e8dd6a6ed4662f6032d38dd37a Stage273366C1EB26B92886531586728BE4975D56F7CA5c92252487615d5379317febc22dba7d47f5d3a8dfa13ba8e2142a3b1d644f107cc89c7e90cda2a5543df5787f8bfde1e Stage281612FC09CFAE280CC35B1331C832A5A87C2EDFFafe0190820b3edc296daefe6d161105163eebf042547a7549fe9f5affaa1cee6bf11cf0450ede8f42e13bf4656e2f9b0 Stage2827DE388E0FEABD92FE7BD433138AA35142BD01A2ab25d33d61cf4cfbac92c26c7c0598e6a95d2895362fc8657bc90d73d77e32f09b86699eb625905ddeb45ccd6b13c71 Stage2A32817E9FF07BC69974221D9B7A9B980FA80B6771528567b1a2f1da31d602ce1ddfd89188d457e4189017712917c5c8f900bb9072c5910c9f975c50337115f952d885635 Stage2A6C18FCBE6B25C370E1305D523B5DE662172875Bb68677e04fcc9103560bb0a5e5c7303f94d39845ec228ff1c84668207c4591ae0e2b6605bdf11e84916534ab09744736 Stage2A9E529C7B04A99019DD31C3C0D7F576E1BBD0970d2f39019bfa05c7e71748d0624be9a9419580f275b82ee091bdc3028e6e5018fdcc915fe7853d4151b44f3d7e101e531 Stage2AD9734B05973A0A0F1D34A32CD1936E66898C034a58e8e935341b6f5cc1369c616de37655b96b07528f762dfcb9d6936995ed4e358d29542ae756f6e5547fa3b5b7797b6 Stage2C39D0B12BB1C25CF46A5AE6B197A59F8EA90CAA02d87ab160291664d62445548a2164c6023486eedb5fe8a026f602507f490b4df4721e8befa65007b84c4f5b1ed95e1bd Stage2CC492D4B188F4CF5003F8B6954F6DD071A8066C206def6c642dcbd58d0291ac110a572743c28d41fbe5f6f0e4a8402fdd036f2a8cf271dabe135919ea0de0d5f1348f871 Stage2D81B0705D26390EB82188C03644786DD6F1A2A9Ef19345e0e5aecc0da45b4c110591bdd9b55e6e10a7f46c97cd247028287ea664bacf7ec7e500a4bf4f53c9dea7625426 Stage2ED64FBA3195F52192C65CAD491A28BF18F6F67A392a2c993b7a1849f11e8a95defacd2f75de532fd62bd4e528ed6e0ccf746e20e2e58041b7ff5327ddbbcf37628429077 Stage2EDF74413A6E2763147184B5E1B8732537A8543658282eb6d6f20c5de6e7f4ae3a42438d2fe2672737205351df003e1969ef1ef0df9e13a9a31bf77f844236857ed0b0bf5 Stage2EFCB9BE7BF162980187237BCB50F4DA2D55430C2935892bb70d954efdc5ee1b0c5f97184a962ea9027514712ba3949dc3ca54559d1d42e116837dda5f9809d6523a41255 Stage2F62600984C5086F2DA3D70BC1F5042CF464F928D381691b297f7f5694709e21ad61ec64513a50942322977d6471f71debc6d3db38807d88778366bae6cfcae45823a17f8 APT29_2013-02_Crysys_Miniduke IndicatorsStage3 Stage300852745CB40730DC333124549A768B471DFF4BCcf59ed2b5473281cc2e083eba3f4b6623d0b1f970eaeeabf9372ffc1ad7e61226632904cf0311ea8f872ddbfd34a3a2a Stage30E263D80C46D5A538115F71E077A6175168ABC5C78e51be60eab2c6e952c9538a46ab52105e4224d4dd4e5fbd381ed33edb5bf847fbc138fbe9f57cb7d1f8fc9fa9a382d Stage3118114446847EAD7A2FE87ECB4943FDBDD2BBD1E4c6608203e751cf27f627220269d683529ad305cba186c07cedc1f633c09b9b0171289301e1d4319a1d76d0513a6ac50 Stage315C75472F160F082F6905D57A98DE94C026E2C56738c60fff066934b6f33e368cfe9a88cde8184c6850d17f90e861309828af1f7b7e3b1695ebe5d303d3d4b6ef4ba1218 Stage31DF9B4DC693CE7250F51CBC7CED53AD0A6E1C587c48d0822eedd75c9c56f688fb8a0525979bc1595ad701ab8a72874a96bcfb94986daeee26b996241e691f3d53f7ec53a Stage3416D1035168B99CC8BA7227D4C7C3C6BC1CE169A811f66d6dd2c713073c0b0aebbe74ce84809c2c7fa19acfa011f97946205f979afb54ac2c166f48ab35a20cd9d53a2ca Stage3493D0660C9CF738BE08209BFD56351D4CF07587786ef8f5f62ae8590d6edf45e04806515a6e2852f2e6701656da74adb412cd0850b0d27750803613223be3eb5ac5cc26c Stage3497F9C688ED142AE91E354B3D9C9E13243A268B0626489f8cafacb1b24fe6ecf0db52f23163eda7f8382b3981e23d81318505806260d2657ca3cd9d7e0995299a5647318 Stage36CF8CA847EE317255A9084BB44AE3F38EF61E5C392ff4df1d079a003ae2a8ac47dd5e81bf4698d9429b004357d1008ea8c9b94ec2a0370900616165db2315a9cbdda28fd Stage3804701959A1DBFBBFC6D8142DE850DB9FCE9A61107a9975d7d96ff3b56de024ab2017582684f863b5af69ef3dc4e86a54cbb1f5486adfe79e08bd0b12d89684c0a9fb2fe Stage39D716D2F8F1C2841A2707EBA2EBADD01ED83003044ee71de720fc1a50c919bc5a01c592da982838c4e90db3cb331f1d2f7b5b74f389da64e642bda75335a6137fdd627d8 Stage3D22D80DA6F042C4DA3392A69C713EE4D64BE8BC8b798c968cbfd53f878e13c7698610d9c12a057ca7c92cda3cd0e09efc5bff2ebd3f7d2991e999038c7f31a6ac6a95c3d Stage3E4ADD0B118113B2627143C7EF1D5B1327DE395F118e64b8e5ce5bdd33ce8bd9e00af672cb1584a6f1059ad1c24bde2a9a8ae83ffc6679eb531d30f3f1c69f81e3a3819dc APT29APT29_2013-04_Bitdefender_A Closer Look at MiniDuke APT29_2013-04_Bitdefender_A Closer Look at MiniDuke2011 2011_20111c658719e6dedb929a6d85359c59682d91b97f3b8ef8ebc8bbd06e06927e7b38090c026f8fca77e209e69c056b042cb7 APT29_2013-04_Bitdefender_A Closer Look at MiniDuke2012 201215101f74f974e3e80cc37805ebe5cc2efed77bb5745d82e1b44b1da4f0c8369173931351f883cff5dbdcc54cc4eb10a715101f74f974e3e80cc37805ebe5cc2efed77bb5745d82e1b44b1da4f0c83691 20121db9187b7b0e5bc97aca233f29b96295c0bc4058fdcff50df543c1f044e588361de51ec5d2b8466f0d424e1c8dcd64541db9187b7b0e5bc97aca233f29b96295c0bc4058fdcff50df543c1f044e58836 20122f9834f7b7fe09d98ef7b27d3828691ed4b361d1ccbbf8e10703f9ec03b05259612fba96383a5098c26fe1a222e1e7552f9834f7b7fe09d98ef7b27d3828691ed4b361d1ccbbf8e10703f9ec03b05259 2012415f88765b88dd90e5b0502e4fa1408e06ac9552c7c8974a510e6e23a9756a45e48fb57ce3d9c56ca3cf6c4aed8ad0ea415f88765b88dd90e5b0502e4fa1408e06ac9552c7c8974a510e6e23a9756a45 201255129d34050b2c028de564e3166611e1d148c26de0972cbe047caf530f11846874593127f50abff5327b3f7038b456d255129d34050b2c028de564e3166611e1d148c26de0972cbe047caf530f118468 20126e57c69963562d28a3a9da9f9103c199c909d0baa185a5d21e1b200a5a14ab729f13dc03904dbd45374acc21344772736e57c69963562d28a3a9da9f9103c199c909d0baa185a5d21e1b200a5a14ab72 2012bf210e54c65ea69ebda418f701c2c6b8aff840f31c1072d641a726cef8c7b5added2f80457aaefe1a80a9cefd1f4645dbf210e54c65ea69ebda418f701c2c6b8aff840f31c1072d641a726cef8c7b5ad 2012c13794601c5bdec3d5d76de9571e6c0e0b022b9fc62907018566895e3b949982423bb8914078a587d08b54d16bbd527cc13794601c5bdec3d5d76de9571e6c0e0b022b9fc62907018566895e3b949982 2012dfe146fffd2ae59172f52048f7e7d231807e0d732e19bdb443820a8305165741561017f887865b8d13f85c5474cdcbb8dfe146fffd2ae59172f52048f7e7d231807e0d732e19bdb443820a8305165741 2012e961202d84aad7fa9faaeb63651735416612d25c611a7a025e2eaab67c79e272ff83dad77ac2b526849930f1860dfd3fe961202d84aad7fa9faaeb63651735416612d25c611a7a025e2eaab67c79e272 2012f151f5a656d43a76a07fa03166906d51f9683b27b0e9b86464e3a68e9dba1fac8d3542af992b1de4cf1f587f61dddb50f151f5a656d43a76a07fa03166906d51f9683b27b0e9b86464e3a68e9dba1fac APT29_2013-04_Bitdefender_A Closer Look at MiniDuke2013 201356dfc5905e7dfc67912ed164dc68c0806fdd3d7cd151415aaffcc1b7ab2f1a842530f54b87508e6f09a6bc5ab863b5db56dfc5905e7dfc67912ed164dc68c0806fdd3d7cd151415aaffcc1b7ab2f1a84 20136c2409d415e66faebf0a031350b44d5a014ab4f62f2c1a3115982d452b7f97b9527537cc28705e01af8d8006ae8308a96c2409d415e66faebf0a031350b44d5a014ab4f62f2c1a3115982d452b7f97b9 20137815e5275ea849a9ed1f193abd8781ff7ae6b88ef6282f6a0900175a4bb59131810de1b9fa0a9396acae23dcd113a60d7815e5275ea849a9ed1f193abd8781ff7ae6b88ef6282f6a0900175a4bb59131 2013abfffd23c81b6301675567622ccee08cf578ce91f372fce68cff8fc1dbc3053dc786a4cdfe08dbe7c64972a14669c4d1abfffd23c81b6301675567622ccee08cf578ce91f372fce68cff8fc1dbc3053d 2013ecc5e2526ca32a447c862612b71c1db5675a759897e680573fa143ac0a8e662ae863737773f64498091cd775c7abde66ecc5e2526ca32a447c862612b71c1db5675a759897e680573fa143ac0a8e662a 2013f0d822926f4e6aec2cf2bd7701d67e8399ccc05bc028377a275a90e06620a1096942f1dfd61d231df8acb7ed0f6310c4f0d822926f4e6aec2cf2bd7701d67e8399ccc05bc028377a275a90e06620a109 APT29APT29_2014-04_FSecure_Targeted Attacks and Ukraine APT29_2014-04_FSecure_Targeted Attacks and Ukraine77A62F51649388E8DA9939D5C467F56102269EB1_Nato_pdf_06cca401a1049ae2fbb4f00aac720136081a9def7150ffd17d6c794b10609fd3463bebe0810bbf241162699a53779113 APT29_2014-04_FSecure_Targeted Attacks and Ukrainedownload download1e5525eb2b80ed57635f0922bc5d1c56812fb8e0da64a9333b0ba66c4411b6b4ba57f95eba99722ebdeae433fc168d721e5525eb2b80ed57635f0922bc5d1c56812fb8e0da64a9333b0ba66c4411b6b4 downloadbd4928921ddadb44f9f573da61dac034533bf14fe38acd5754f3ccec1d566300edf7a81dab0bf0520bfb8204a010b730bd4928921ddadb44f9f573da61dac034533bf14fe38acd5754f3ccec1d566300 APT29APT29_2014-05_FSecure.Miniduke still duking it out APT29_2014-05_FSecure.Miniduke still duking it out58be4918df7fbf1e12de1a31d4f622e570a81b93_Proposal-Cover-Sheet-English.rtf_6b08ff05b50dd89d81e2aa47554aa5e64c663f1b23d44283bbd2693ffb03a3864ad4455deb079a4f5c94d92be53a88cd APT29_2014-05_FSecure.Miniduke still duking it outb27f6174173e71dc154413a525baddf3d6dea1fd.dll_270ca8368cd4216b1813281d3efe485d2ae4cc6834e3679e99fc93d2f5fba02167a31cf5b68a5a9ca7aa1a4b9f7cb4ae APT29APT29_2014-07_Kaspersky_Miniduke is back_Nemesis Gemina and the Botgen Studio APT29_2014-07_Kaspersky_Miniduke is back_Nemesis Gemina and the Botgen Studio86EC70C27E5346700714DBAE2F10E168A08210E4ba57f95eba99722ebdeae433fc168d721e5525eb2b80ed57635f0922bc5d1c56812fb8e0da64a9333b0ba66c4411b6b4 APT29_2014-07_Kaspersky_Miniduke is back_Nemesis Gemina and the Botgen StudioECD2FEB0AFD5614D7575598C63D9B0146A67ECAAedf7a81dab0bf0520bfb8204a010b730bd4928921ddadb44f9f573da61dac034533bf14fe38acd5754f3ccec1d566300 APT29APT29_2014-07_Kaspersky_The MiniDuke Mystery PDF 0-day APT29_2014-07_Kaspersky_The MiniDuke Mystery PDF 0-day2402C2DC6ACC5A8418201FEA5B2043F985E1DD69_EUAG_report.pdf_cf5a5239ada9b43592757c0d7bf661695fbe3c1075e1afb6c1a3ce757bb8d401e1b1f61db42902cb72fd7b85e4e5f1a5 APT29_2014-07_Kaspersky_The MiniDuke Mystery PDF 0-day5951EEF7C336E442C95F247AB2ECC4895F5D3E45_ c.pdf_0cdf55626e56ffbf1b198beb4f6ed55959b62e650a437032886e1cc74dd7cdf0abab5ee6bc85fb4aa18568733aa89370 APT29_2014-07_Kaspersky_The MiniDuke Mystery PDF 0-dayADCB57BCE7FBB5E076F3272990BEDEE1D9544EE5_EUAG_report.pdf__3f301758aa3d5d123a9ddbad1890853b8a844864e62650905fc438f6291fa64ae2d3822054cc8354c44a923d5364905e APT29_2014-07_Kaspersky_The MiniDuke Mystery PDF 0-dayFBC3856FD689E1AC0F8FB56BBD7D0A2B8332A928_ ASEM_Seminar.pdf_88292d7181514fda5390292d73da28d4784d1ebd1faccec27f98970cc266859eaf5676da1c451e3304fb55435d8c8473 APT29_2014-07_Kaspersky_The MiniDuke Mystery PDF 0-dayFC53525F4E2E5B8EBE86778C20FD8916612CFD29_action_plan.pdf_3668b018b4bb080d1875aee346e3650a5b21100b828b77758bfd6495c924e71f8bbd890c78d07067928bd7beccae087e APT29_2014-07_Kaspersky_The MiniDuke Mystery PDF 0-dayThe 2013 Armenian Economic Association.pdf _c03bcb0cde62b3f45b4d772ab635e2b0da7f82d0c80c7d95d787185c04ecc116062bc655e513eaf1ccb4a1423bdbd289 APT29_2014-07_Kaspersky_The MiniDuke Mystery PDF 0-daythemysteryofthepdf0-dayassemblermicrobackdoor.pdf304bb5f1419a2e56f4bcd0d0f3b1312fb7cf61434cb485baafd9c3205f64c0cc8f1fa2302f9405a16cd421e888f4973e APT29APT29_2014-11_FSecure_OnionDuke APT Attacks Via the Tor Network APT29_2014-11_FSecure_OnionDuke APT Attacks Via the Tor NetworkA75995F94854DEA8799650A2F4A97980B71199D228f96a57fa5ff663926e9bad51a1d0cb19972cc87c7653aff9620461ce459b996b1f9b030d7c8031df0c8265b73f670d APT29_2014-11_FSecure_OnionDuke APT Attacks Via the Tor NetworkB491C14D8CFB48636F6095B7B16555E9A575D57Fc8eb6040fd02d77660d19057a38ff769366affd094cc63e2c19c5d57a6866b487889dab5d1b07c084fff94262d8a390b APT29_2014-11_FSecure_OnionDuke APT Attacks Via the Tor NetworkD433F281CF56015941A1C2CB87066CA62EA1DB37d1ce79089578da2d41f1ad901f7b10140102777ec0357655c4313419be3a15c4ca17c4f9cb4a440bfb16195239905ade APT29APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke0E5F55676E01D8E41D77CDC43489DA8381B68086dc6cc442c0900104a5601a6049354fad41d63d293a6e2722fcf82f8bf67b8f566bd4d3f669ede146ccc286f0228d8f62 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke353540C6619F2BBA2351BABAD736599811D3392Eab7a66ed3c6de1b7449d6054a8b46d7f8cad0a40dd87e5d77e5c939bd7ea838c3549c44b525e2f4a1227d53c4af925be APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke4E3C9D7EB8302739E6931A3B5B605EFE8F211E519d95c8f09f991a5fc37b79c45ebd20433c5d2fcacafc21d9f43c595ddf03bec801ccb958b8641018612c21bc741800d0 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke5295B09592D5A651CA3F748F0E6401BD48FE7BDA6571a2d3892ca937697e96f8bb795e428c6c57f7e9c81fcf194d17a752f8da4295fab5dad8eb79bd289256b9cdb7415e APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke55F83FF166AB8978D6CE38E80FDE858CF29E660B8e5106565fd96df1308d208d1e3426a37e371cd323898e403df7a80add34d791e160e443bcd2d02f27ddc0c04ba1bdab APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke580ECA9E36DCD1A2DEB9075BCAE90AFEE46AACE2351c913e4120081d8f04317121654a391590bdbaff2c178387e924b689b030057b4cbd2865e9c4dd3886a8791ac8e4ee APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke5A199A75411047903B7BA7851BF705EC545F6DA9f22606385080d35551e7f8e8f49b7de9fe5bc1248fc79fc15663ef169f0a269c1abe847d00b01e9571fe5c0d760d68f0 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke5C5EC0B5112A74A95EDC23EF093792EB3698320E3729a14be6b3a92265cf6d8e14c79abe64e3a2bba82027dd6ff631fa5890a7ba8331b62a0a4c0b1ca24d143c2b61c323 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke65681390D203871E9C21C68075DBF38944E782E86542cd548182d6adc08a63c942f9bc54880ae80fdc874002a6d9c807802794d4a35c384551d73bb36277b2f1e63d67e2 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke6A43ADA6A3741892B56B0EF38CDF48DF1ACE236Ddc92eba92885f2e937cb6f694647eb713d37e753812687fb7287cf8644d13fe2673ea7c3b540637c1ce1c6819f1c521b APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke6DB1151EEB4339FC72D6D094E2D6C2572DE894705a7659b691a3caf107e6636d8906dcb0334ed05005ce829224d0dd4cc5baab6b837cf02ac0e321c8f97d11b3ba1c77a7 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke74BC93107B1BBAE2D98FCA6D819C2F0BBE8C9F8Afc0e380447be2bbdf9f06fc3358f8648b3236d1d0924cd9a17babd13209fe6706fd3a9228f22fe658eb4eb0c71360b73 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke7631F1DB92E61504596790057CE674EE9057075520d86cb4ebbffb739faa47f7354ee134d5f1d8d2629b91744fe812207cb3f0bebfd1aec9937b7744a263d1a4e3421063 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke764ADD69922342B8C4200D64652FBEE1376ADF1Ce175be029dd2b78c059278a567b3ada12146da9bc0e27d7eb10983b7dd89f250fa0015ce284dde8f0bb6a79626d34a2a APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke7803F160AF428BCFB4B9EA2ABA07886F232CDE4Eb59199877e0d68a5e93fc8ea76374ed15b50e26a01b320f05d66727e9d220d5858cdac203ff62e4b9ced1cafc2683637 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke8949C1D82DDA5C2EAD0A73B532C4B2E1FBB58A0E23d2592db15c251382706515cf4fd37e7e9c0bda27bbc80d947bc0c6ce29a19c824288d2b481f92a1637b7b8dfc8b81c APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke8AA9F5D426428EC360229F4CB9F722388F0E535C1a874e5ecd67dffab45e17e9b730daed51b4e69183f3d02124f3314cc64a7869425f053d8021c74c12f21d7c2afe2163 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDuke9700C8A41A929449CFBA6567A648E9C5E4A14E70608b22fcd2d067730176e335d3c6454b4fc0bbb90aeecd3229aa932437273ba59f887a6eac569b56693602b957e205e2 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDukeB54B3C67F1827DAB4CC2B3DE94FF0AF4E5DB3D4Cf611f8b0655a8980cf71a252536c7a5a16870c6b572934f5a106d5f632b6d41bb23924c12ddf172be24c6dfca25226b1 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDukeC671786ABD87D214A28D136B6BAFD4E33EE669512aa2a6e004159b9e3a590c63a0cc47b3ba35aa14ccc0e4fa8e47b621ea1d1efe1b012b623afd469e56015c0857fec646 APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDukeCCB29875222527AF4E58B9DD8994C3C7EF617FD80be02d5f66f84ebd03f362ad4b4a06e604819cde7e928e6ff376daeb73b894959f672a85b363753c227416fc0f4a8acd APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDukeED14DA9B9075BD3281967033C90886FD7D4F14E5acac7584d7dc066d27555997d0f6d6cf9c2562e05eb940ae8d73c9baa7cfe85cb3ec619689227f65e4fbeeb3fec598ad APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDukeF621EC1B363E13DD60474FCFAB374B8570EDE4DEd824cbf08604dea9724ab8e707bb9fec68355d29ce79a5177084fe6292f0f8b9daa2018c571b552fff9f4a0815b432ce APT29_2014_FSecure_Cosmicduke Cosmu with a twist of MiniDukeFECDBA1D903A51499A3953B4DF1D850FBD5438BDdffcd7f930f8874dc9f5115d0ae50b573e889cd495e008760fd12751d6d45cadf8a7280c4545f2ebe469f84b9b77c835 APT29APT29_2015-04_Kaspersky_CozyDuke-CozyBear APT29_2015-04_Kaspersky_CozyDuke-CozyBear1A262A7BFECD981D7874633F41EA5DE8_5463.exe_1a262a7bfecd981d7874633f41ea5de8099524703c250d1d1a16288dbd2f425d6cd0491f608e207a82f239b39bb26b7e APT29_2015-04_Kaspersky_CozyDuke-CozyBear1A42ACBDB285A7FBA17F95068822EA4E_ativvaxy_cik.dat_1a42acbdb285a7fba17f95068822ea4e4464c945c88ac9a4a22e86f0922f18c164e87f26c3f3fa054eb488fdd7d4bfc8 APT29_2015-04_Kaspersky_CozyDuke-CozyBear2AABD78EF11926D7B562FD0D91E68AD3_ Monkeys.exe_2aabd78ef11926d7b562fd0d91e68ad3f9ff78669e4b251ac1e31076eaf420bee6f2060dbc926cc33603f893658ca86c APT29_2015-04_Kaspersky_CozyDuke-CozyBear3D3363598F87C78826C859077606E514_ player.exe_3d3363598f87c78826c859077606e51401468b1d3e089985a4ed255b6594d24863cfd94a647329c631e4f4e52759f8a9 APT29_2015-04_Kaspersky_CozyDuke-CozyBear57A1F0658712EE7B3A724B6D07E97259_ _3852.exe__57a1f0658712ee7b3a724b6d07e97259bc5625c674f08cca18e73eb661eed0182ef16e27983098cf1c61892ca621d60b APT29_2015-04_Kaspersky_CozyDuke-CozyBear57A1F0658712EE7B3A724B6D07E97259_3852.exe_57a1f0658712ee7b3a724b6d07e97259bc5625c674f08cca18e73eb661eed0182ef16e27983098cf1c61892ca621d60b APT29_2015-04_Kaspersky_CozyDuke-CozyBear6761106F816313394A653DB5172DC487_ amdhcp32.dll__6761106f816313394a653db5172dc48737ceea0922d1177a9de74f4858678acf6afd22706489fcca35a509bca9688cb7 APT29_2015-04_Kaspersky_CozyDuke-CozyBear7F6BCA4F08C63E597BED969F5B729C56_ aticalrt.dll_7f6bca4f08c63e597bed969f5b729c5665fa52f632e4e83ff83120c7df6b90291025a76d5daeb183e814ec0b3bd2bd4e APT29_2015-04_Kaspersky_CozyDuke-CozyBear83f57f0116a3b3d69ef7b1dbe9943801.dll_83f57f0116a3b3d69ef7b1dbe9943801fdd7e8582ef8d7a23f269653435582cfe924ca9b2db34af63af5e57d1f3e09c2 APT29_2015-04_Kaspersky_CozyDuke-CozyBear8670710bc9477431a01a576b6b5c1b2.dll_8670710bc9477431a01a576b6b5c1b2a1233cca912fb61873c7388f299a4a1b78054e681941beb31f0a48f8c6d7a182b APT29_2015-04_Kaspersky_CozyDuke-CozyBear90BD910EE161B71C7A37AC642F910059_5463.exe__90bd910ee161b71c7a37ac642f910059ff9edb92ee8125519aa1eea60cab9999bcd4caa87b891882caddc73a2a5ae9cf APT29_2015-04_Kaspersky_CozyDuke-CozyBear93176DF76E351B3EA829E0E6C6832BDF_ hppscan854.pdf_93176df76e351b3ea829e0e6c6832bdf950c8f9dbec3a2a1603f9202408cf49ea5a9573c7296e5940a42581cbd6fc8c2 APT29_2015-04_Kaspersky_CozyDuke-CozyBear95B3EC0A4E539EFAA1FAA3D4E25D51DE_Office Monkeys (Short Flash Movie).exe_95b3ec0a4e539efaa1faa3d4e25d51de7fd72a36f7e0e6e0a8bc777fc9ed41e0a6d5526c98bc95a09e189531cf7e70d5 APT29_2015-04_Kaspersky_CozyDuke-CozyBear9AD55B83F2EEC0C19873A770B0C86A2F_reader_sl.exe_9ad55b83f2eec0c19873a770b0c86a2f7cdb9c2e8b6ca7f0a683a39c0bdadc7a512cff5d8264fdec012c541fd19c0522 APT29_2015-04_Kaspersky_CozyDuke-CozyBear9AD55B83F2EEC0C19873A770B0C86A2F_reader_sl.exe__9ad55b83f2eec0c19873a770b0c86a2f7cdb9c2e8b6ca7f0a683a39c0bdadc7a512cff5d8264fdec012c541fd19c0522 APT29_2015-04_Kaspersky_CozyDuke-CozyBear9E3F3B5E9ECE79102D257E8CF982E09E_Cache.dl_9e3f3b5e9ece79102d257e8cf982e09e8d86c0985530271618a342579afd1a9ecb27dfb080866e3b888bd3e45e1eb8f5 APT29_2015-04_Kaspersky_CozyDuke-CozyBearA5D6AD8AD82C266FDA96E076335A5080_reader_sl.exe_2a5d6ad8ad82c266fda96e076335a50807ed2d1aceab5f54df4acca63b5d269842d49521e13bab5e652237667c7eef261 APT29_2015-04_Kaspersky_CozyDuke-CozyBearB5553645FE819A93AAFE2894DA13DAE7_ amd_opencl32.dll_b5553645fe819a93aafe2894da13dae71a7239c006a3adf893bdb5c2300b2964ed8bb454e1b622853e4460707dc63c16 APT29_2015-04_Kaspersky_CozyDuke-CozyBearD543904651B180FD5E4DC1584E639B5E_3852.ZIP_d543904651b180fd5e4dc1584e639b5e6a177de940ba477574947ed2d06fd7c08c7baf04b83cb7f3a46e4a93f889bf64 APT29_2015-04_Kaspersky_CozyDuke-CozyBearD596827D48A3FF836545B3A999F2C3E3_ aticaldd.dll__d596827d48a3ff836545b3a999f2c3e30dc7438be5b21a36651de0a08361b18d76f0920517a7d51f75dc234740f392ca APT29_2015-04_Kaspersky_CozyDuke-CozyBearD596827D48A3FF836545B3A999F2C3E3_aticaldd.dll_d596827d48a3ff836545b3a999f2c3e30dc7438be5b21a36651de0a08361b18d76f0920517a7d51f75dc234740f392ca APT29_2015-04_Kaspersky_CozyDuke-CozyBearEB22B99D44223866E24872D80A4DDEFD_ reader_sl.exe__eb22b99d44223866e24872d80a4ddefdf722677df4fb7eb4ac986a944d4f6630b91ac22b31f8d39ec9bf941376d5d4db APT29_2015-04_Kaspersky_CozyDuke-CozyBearF16DFF8EC8702518471F637EB5313AB2_ hppscan854.exe_f16dff8ec8702518471f637eb5313ab22b160b7eef5ce5fdb83889f96fc40cbbbc7b85450ff2afdf781a8eb5d6a0f541 APT29_2015-04_Kaspersky_CozyDuke-CozyBearF58A4369B8176EDBDE4396DC977C9008_reader_sl.exe_f58a4369b8176edbde4396dc977c900830c69d91247f8a72a69e4d7c4bce3eafba40975e5890c23dc4dbe7c9a11afa73 APT29_2015-04_Kaspersky_CozyDuke-CozyBearf2b05e6b01be3b6cb14e9068e7a66fc1.dll_f2b05e6b01be3b6cb14e9068e7a66fc1036c5c0075d67f67fee546321f5b9c4f00d37aa9249ffe1627e71946bad4a3d1 APT29APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux Support APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux Support04299C0B549D4A46154E0A754DDA2BC9E43DFF76bfd2d6bf8e99332157a0fe46a4a91c5256531cc133e7a760b238aadc5b7a622cd11c835a3e6b78079d825d417fb02198 APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux Support28D29C702FDF3C16F27B33F3E32687DD82185E8B8c9113aec4d0585f2744e2027ef8a03d8aba704299ad5f649a48b822f548464a031a9c10fc28683010a5f6329a1bdc77 APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux Support2F53BFCD2016D506674D0A05852318F9E8188EE107660a9b83b7fbc7ab372a911c69a85be1490d6e5ce4c2cddef0815c55bf8946cb830ce0ac7f586cf1ae16ef66f1bd8b APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux Support317BDE14307D8777D613280546F47DD0CE54F95Ba4f3e00b3da3e9d9382840dfbdbef3115d695ff02202808805da942e484caa7c1dc68e6d9c3d77dc383cfa0617e61e48 APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux Support476099EA132BF16FA96A5F618CB44F87446E3B0227f3d0556c59e32791567a09236507d9b3bf1b4415afcdda6b7fbe07302fab1d865d1dc8fc6b024c98366a633e0612cb APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux Support4800D67EA326E6D037198ABD3D95F4ED594493138473fae7fdae7ee5a8b0fb64ebb596c197d8725e39d263ed21856477ed09738755134b5c0d0b9ae86ebb1cdd4cdc18b7 APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux Support52D44E936388B77A0AFDB21B099CF83ED6CBAA6F72512c49401bd3d04a8ef6c7a64753070f7d64f514e99a2abdc10dc85e7e6f57c210a0f35472f7b897a19b73be36bece APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux Support6A3C2AD9919AD09EF6CDFFC80940286814A0AA2C50bf9c6de53b7de6906c2d5ed6177c2851e713c7247f978f5836133dd0b8f9fb229e6594763adda59951556e1df5ee57 APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux Support78FBDFA6BA2B1E3C8537BE48D9EFC0C47F417F3Cf338e21422eca3a52239089f821519d6dea20c241265e2995244187c8476570893df41b9623784a4ca6ed075721b8cdf APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux Support9F5B46EE0591D3F942CCAA9C950A8BFF94AA7A0F97886672cc570ba4a5d6a162e92d015585c5ba695992ed59269ea7f7a58f3453f6047729d1f68a444d450439bbccc1f4 APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux SupportBFE26837DA22F21451F0416AA9D241F98FF1C0F8837b522730ff896435682b36f7b27a3e12f58639a883b0fcfe3d2e8bcb0330b978731975c9dfa2f8e583adbafc4d534e APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux SupportC16529DBC2987BE3AC628B9B413106E5749999EDe163d9a91f97f133b0e3f2bbe4dc226ad4d79be85dc98f74088d6393a8fdf2b5d947ae4f279909af2aed0221dcecfe94 APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux SupportCC15924D37E36060FAA405E5FA8F6CA15A3CACE2b0a9a175e2407352214b2d005253bc0c6c8eb3365b7fb7683b9b465817e5cb87574026e306c700f3d103eba056777720 APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux SupportDEA6E89E36CF5A4A216E324983CC0B8F6C58EAA84d3a94134aaf590ae8ece0a57257e12980cb4007b9756246404c260bc69abf5d4938a1cc217d40ecbfdd6171b02b9e24 APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux SupportE33E6346DA14931735E73F544949A57377C6B4A0e268e5c53da8361d4f7b6a884d7dfc8abc207257bb88e323c57360a06895a45c29d15ad91c803b2af6132d8be620569a APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux SupportED0CF362C0A9DE96CE49C841AA55997B4777B326856b224da7525ea5192efbef7a9b8112bfc1bafd9b01178037226fa55546d7ed7e9203c13e1b66419e887fee704d5196 APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux SupportF54F4E46F5F933A96650CA5123A4C41E115A9F61ffb407dc2b20357302a4550a73f6c342ecd0ce1973500c27bb5d70f326d115fba84c0b1680a726a041ed57b42063e7b1 APT29_2015-07_FSecure_Duke APT Groups Latest Tools Cloud Services and Linux SupportF97C5E8D018207B1D546501FE2036ADFBF774CFDb8690064dc61333c591252c4204fbbb3c3ea57eea9f522cfc70ef8c3b614f7e44903293a2e8354359b99efbf4cd436df APT29APT29_2015-07_Fireeye_Hammertoss_Stealthy_tactics_define_Russian_Cyber APT29_2015-07_Fireeye_Hammertoss_Stealthy_tactics_define_Russian_Cyber42e6da9a08802b5ce5d1f754d4567665637b47bc_WerMgr.ex_d3109c83e07dd5d7fe032dc80c581d088995535721ebeaf6983c6cecf3182d756ca5b3911607452dd4ba2ad8ec86cf96 APT29APT29_2015-07_Kaspersky_Minidionis one more APT with a usage of cloud drives APT29_2015-07_Kaspersky_Minidionis one more APT with a usage of cloud drives6c8eb3365b7fb7683b9b465817e5cb87574026e306c700f3d103eba056777720 (1)b0a9a175e2407352214b2d005253bc0c6c8eb3365b7fb7683b9b465817e5cb87574026e306c700f3d103eba056777720 APT29APT29_2015-07_PaloAlto_Tracking_MiniDionis APT29_2015-07_PaloAlto_Tracking_MiniDionis10B31A17449705BE20890DDD8AD97A2FEB0936743a04a5d7ed785daa16f4ebfd3acf0867ee5eb9d57c3611e91a27bb1fc2d0aaa6bbfa6c69ab16e65e7123c7c49d46f145 APT29_2015-07_PaloAlto_Tracking_MiniDionis38DD05B9CC892491347F4347870A6B77D9AEA8564cbd9a0832dcf23867b092de37c10d9d2a36823323b857921d056c0161fc15d47f29b7513443346a0aeb537cbf437f0d APT29_2015-07_PaloAlto_Tracking_MiniDionis44403A3E51E337C1372B0BECDAB74313125452C7e00bf9b8261410744c10ae3fe2ce904956ac764b81eb216ebed5a5ad38e703805ba3e1ca7d63501ba60a1fb52c7ebb6e APT29_2015-07_PaloAlto_Tracking_MiniDionis47F26990D063C947DEBBDE0E10BD267FB0F3271942ffc84c6381a18b1f6d000b94c74b09c1ee4232d1b6504fc7f93cb0478e90049a71992498ed2d701925d852e91cfcc3 APT29_2015-07_PaloAlto_Tracking_MiniDionis4F977DEBAA25925E82F254080E8F7C42B70CB669030da7510113c28ee68df8a19c643bb07b3e344ea44a9b5fdcee89818435d377b4413e704f8c2ef5522a0255bd4eca74 APT29_2015-07_PaloAlto_Tracking_MiniDionis5367186E3AA9B2B178BA82922C88AF538D61A99A01039a95e0a14767784acc8f07035935c0675b84f5960e95962d299d4c41511bbf6f8f5f5585bdacd1ae567e904cb92f APT29_2015-07_PaloAlto_Tracking_MiniDionis5875E9E27607AAB5D39E312CD141D8941B07746298613ecb3afde5fc48ca4204f8363f1d7f8d8992dda6a48c54234e76cf0a0f445842aea1cd91d3252185c7b436e51cde APT29_2015-07_PaloAlto_Tracking_MiniDionis6C95CDBE7D3C65104ABD0912AA7DC990998870302e64131c0426a18c1c363ec69ae6b5f226fdc7682cf367d4d1e635a40beab0762cee43978a0f86867be03aab81244107 APT29_2015-07_PaloAlto_Tracking_MiniDionis71031EBB535923722C8FCFDCBA127E4FDEF24F49e07ef8ffe965ec8b72041ddf9527cac4502e42dc99873c52c3ca11dd3df25aad40d2b083069e8c22dd45da887f81d14d APT29_2015-07_PaloAlto_Tracking_MiniDionis7B8851F98F765038F275489C69A485E1BED4F82Da9c045c401afb9766e2ca838dc6f47a4d3d503934c0dfe75e386d0fb8da2e32238d93739624b6c5a929fe5b722b35d36 APT29_2015-07_PaloAlto_Tracking_MiniDionis84BA6B6A0A3999C0932F35298948F149EE05BC0270f5574e4e7ad360f4f5c2117a7a1ca7a713982d04d2048a575912a5fc37c93091619becd5b21e96f049890435940004 APT29_2015-07_PaloAlto_Tracking_MiniDionis890B943BA5C43B74AD2965874A21C7EF4BA896FF0f9534b63cb7af1e3aa34839d7d6e63208b410d359ec2d6cab73bd6c0be138d9bdc475e3f63fec65794a74e5d5958b3b APT29_2015-07_PaloAlto_Tracking_MiniDionis910DFE45905B63C12C6F93193F5DC08F5B012BC39018fa0826f237342471895f315dbf39ed7abf93963395ce9c9cba83a864acb4ed5b6e57fd9a6153f0248b8ccc4fdb46 APT29_2015-07_PaloAlto_Tracking_MiniDionis9EAE02E8D4BC405AFD78DD364E96650F3608BF3Bc8b49b42e6ebb6b977ce7001b6bd96c893ecd67c6102802e2e058eac512a2c75434912c28dc2eae6c108451272008bc5 APT29_2015-07_PaloAlto_Tracking_MiniDionis9EEF49FC724B9F40BE795A80BC6363EB0C6B6DD651ea28f4f3fa794d5b207475897b1eefca0b804c30052456362fe22ae6fa8482f91651c2c18dc41cda4c6e282fdede6f APT29_2015-07_PaloAlto_Tracking_MiniDionisCC15924D37E36060FAA405E5FA8F6CA15A3CACE2b0a9a175e2407352214b2d005253bc0c6c8eb3365b7fb7683b9b465817e5cb87574026e306c700f3d103eba056777720 APT29_2015-07_PaloAlto_Tracking_MiniDionisD7F7AEF824265136AD077AE4F874D265AE45A6B03195110045f64a3c83fc3e043c46d25388a40d5b679bccf9641009514b3d18b09e68b609ffaf414574a6eca6536e8b8f APT29_2015-07_PaloAlto_Tracking_MiniDionisF19873B6D0DB1D2DDE9134D69F5E2D5F6B939AA7719cf63a3922953ceaca6fb4dbed6584a544aa392c1f519aebdb2a7b6dc23290082b7f7103c7e3022af35dfd6bc10dde APT29APT29_2015-07_Palo_Alto_Unit 42 Technical Analysis Seaduke APT29_2015-07_Palo_Alto_Unit 42 Technical Analysis SeadukeBB71254FBD41855E8E70F05231CE77FEE6F00388_LogonUI.exe_a25ec7749b2de12c2a86167afa88a4dd3eb86b7b067c296ef53e4857a74e09f12c2b84b666fc130d1f58aec18bc74b0d APT29APT29_2015-07_Symantec_Seaduke latest weapon in the Duke armory APT29APT29_2015-08_Prevenity Stealing data from public institutions APT29_2015-08_Prevenity Stealing data from public institutionsF1F1ACE3906080CEF52CA4948185B665D1D7B13E_RD RCB 11.06.docx_84137c8e7509a0e9cf7ff71ba060cdb5e745fc57f816b2b507406ce1c0ec47f8f84d8f5efeaf327c657723c897522c83 APT29APT29_2015-09_FSecure_THE DUKES7 years of Russian cyberespionage APT29_2015-09_FSecure_THE DUKES7 years of Russian cyberespionageCloudDuke CloudDuke04299C0B549D4A46154E0A754DDA2BC9E43DFF76bfd2d6bf8e99332157a0fe46a4a91c5256531cc133e7a760b238aadc5b7a622cd11c835a3e6b78079d825d417fb02198 CloudDuke10B31A17449705BE20890DDD8AD97A2FEB0936743a04a5d7ed785daa16f4ebfd3acf0867ee5eb9d57c3611e91a27bb1fc2d0aaa6bbfa6c69ab16e65e7123c7c49d46f145 CloudDuke2E27C59F0CF0DBF81466CC63D87D421B33843E87964e4b516d72b7717aabb71ad7cc7bf61d4ac97d43fab1d464017abb5d57a6b4601f99eaa93b01443427ef25ae5127f7 CloudDuke2F53BFCD2016D506674D0A05852318F9E8188EE107660a9b83b7fbc7ab372a911c69a85be1490d6e5ce4c2cddef0815c55bf8946cb830ce0ac7f586cf1ae16ef66f1bd8b CloudDuke317BDE14307D8777D613280546F47DD0CE54F95Ba4f3e00b3da3e9d9382840dfbdbef3115d695ff02202808805da942e484caa7c1dc68e6d9c3d77dc383cfa0617e61e48 CloudDuke44403A3E51E337C1372B0BECDAB74313125452C7e00bf9b8261410744c10ae3fe2ce904956ac764b81eb216ebed5a5ad38e703805ba3e1ca7d63501ba60a1fb52c7ebb6e CloudDuke47F26990D063C947DEBBDE0E10BD267FB0F3271942ffc84c6381a18b1f6d000b94c74b09c1ee4232d1b6504fc7f93cb0478e90049a71992498ed2d701925d852e91cfcc3 CloudDuke4800D67EA326E6D037198ABD3D95F4ED594493138473fae7fdae7ee5a8b0fb64ebb596c197d8725e39d263ed21856477ed09738755134b5c0d0b9ae86ebb1cdd4cdc18b7 CloudDuke52D44E936388B77A0AFDB21B099CF83ED6CBAA6F72512c49401bd3d04a8ef6c7a64753070f7d64f514e99a2abdc10dc85e7e6f57c210a0f35472f7b897a19b73be36bece CloudDuke6A3C2AD9919AD09EF6CDFFC80940286814A0AA2C50bf9c6de53b7de6906c2d5ed6177c2851e713c7247f978f5836133dd0b8f9fb229e6594763adda59951556e1df5ee57 CloudDuke7B8851F98F765038F275489C69A485E1BED4F82Da9c045c401afb9766e2ca838dc6f47a4d3d503934c0dfe75e386d0fb8da2e32238d93739624b6c5a929fe5b722b35d36 CloudDuke84BA6B6A0A3999C0932F35298948F149EE05BC0270f5574e4e7ad360f4f5c2117a7a1ca7a713982d04d2048a575912a5fc37c93091619becd5b21e96f049890435940004 CloudDuke910DFE45905B63C12C6F93193F5DC08F5B012BC39018fa0826f237342471895f315dbf39ed7abf93963395ce9c9cba83a864acb4ed5b6e57fd9a6153f0248b8ccc4fdb46 CloudDuke9F5B46EE0591D3F942CCAA9C950A8BFF94AA7A0F97886672cc570ba4a5d6a162e92d015585c5ba695992ed59269ea7f7a58f3453f6047729d1f68a444d450439bbccc1f4 CloudDukeBFE26837DA22F21451F0416AA9D241F98FF1C0F8837b522730ff896435682b36f7b27a3e12f58639a883b0fcfe3d2e8bcb0330b978731975c9dfa2f8e583adbafc4d534e CloudDukeC16529DBC2987BE3AC628B9B413106E5749999EDe163d9a91f97f133b0e3f2bbe4dc226ad4d79be85dc98f74088d6393a8fdf2b5d947ae4f279909af2aed0221dcecfe94 CloudDukeCC15924D37E36060FAA405E5FA8F6CA15A3CACE2b0a9a175e2407352214b2d005253bc0c6c8eb3365b7fb7683b9b465817e5cb87574026e306c700f3d103eba056777720 CloudDukeD7F7AEF824265136AD077AE4F874D265AE45A6B03195110045f64a3c83fc3e043c46d25388a40d5b679bccf9641009514b3d18b09e68b609ffaf414574a6eca6536e8b8f CloudDukeDEA6E89E36CF5A4A216E324983CC0B8F6C58EAA84d3a94134aaf590ae8ece0a57257e12980cb4007b9756246404c260bc69abf5d4938a1cc217d40ecbfdd6171b02b9e24 CloudDukeED0CF362C0A9DE96CE49C841AA55997B4777B326856b224da7525ea5192efbef7a9b8112bfc1bafd9b01178037226fa55546d7ed7e9203c13e1b66419e887fee704d5196 CloudDukeF54F4E46F5F933A96650CA5123A4C41E115A9F61ffb407dc2b20357302a4550a73f6c342ecd0ce1973500c27bb5d70f326d115fba84c0b1680a726a041ed57b42063e7b1 CloudDukeF97C5E8D018207B1D546501FE2036ADFBF774CFDb8690064dc61333c591252c4204fbbb3c3ea57eea9f522cfc70ef8c3b614f7e44903293a2e8354359b99efbf4cd436df CloudDukeFE33B9F95DB53C0096AE9FB9672F9C7C32D22ACF4f148ffeac50df60f9f9015b909d8ed06c7e768e48b9b225b7b9f84528c53c2e6f9b639ce2e7919fe0dff9aad07ea4f5 APT29_2015-09_FSecure_THE DUKES7 years of Russian cyberespionageCosmicDuke CosmicDuke01E5080B832C6E4FCB7B9D06CAFFE03DAB8D95DAa4008cf300fd22f470c38489da9e25cfaecb468db5cebcfa25deadeb3b12fbc48b05a485b44deb500b4002521bc3e685 CosmicDuke02F55947402689EC755356AB6B0345A592446DA7cb8624999aa959b873e9bdb60ee65c0f187b1cc7264c04c3158f835546cad0be74e6411bb50cb8899179a71018f0b4b9 CosmicDuke03C5690728B7DFFB2F4AB947FE390264751428AA3a2ba475bf6a60dbe3ed59330c53c3f7246543cc4a538472bed0626c159715a963e39dfc69d79f60c3ab227c62277016 CosmicDuke0653A8F06B140F4FAC44ACB3BE723D7BB26025585dabff44971cc53bef7d8e17e85dda737c14761d20617ab7f408d6c63367f16026377d7c13f3e3c67525e034fc0c6d7c CosmicDuke0BC8485CE6C24BB888E2329D479C9B7303BB98B48988f29396515f47de0457f9daa1dd62dad4c4aea24f2bd3e2f4b93bf782ebef70e8fdf930aff25a3e1b85a717314aa0 CosmicDuke0C8DB6542172DE98FA16C9BACFEF9ED4099FD87291a50a90cb31fad48908d5c6294e92baccd3c69710977360459c0d2539d5e7e7defce097bcfee3ae62e564de7c938f17 CosmicDuke0D8F41FE09DBD75AB953F9E64A6CDBBBC198BF2B0ee0f7fd55843d1ef7c9d6396bbcb99ba8200a476f72ef77f4cd6bd71ebae9f473e923b140600b9da0bbaf1f22e1cecb CosmicDuke0E5F55676E01D8E41D77CDC43489DA8381B68086dc6cc442c0900104a5601a6049354fad41d63d293a6e2722fcf82f8bf67b8f566bd4d3f669ede146ccc286f0228d8f62 CosmicDuke0FF7CE34841C03C876B141C1F46D0FF2519889CCfa52383868abf82d027b971e799a599aa31551902d2cbb7110a9f5f04bfba7269410850155dc6163c7bf8cad171ed68c CosmicDuke11B5CFB37EFB45D2C721CBF20CAB7C1F5C1AA44B51a96f279e790d2f861bb0ff843a7328620da58f80640661ccec202a3b20f138b8a0c9f374fb1fb5525dd3fe00ac5a8c CosmicDuke151362502D569B16453E84A2F5D277D8E4E878C2685d678b3ffd72fce3f8b48d82a76f6070a7248b90573ba2edde5d9e8f0acd478235054480d98b0531d85725555f3a5c CosmicDuke174373AB44CF6E7355F9DBB8469453519CB61A4478c6245367e6ef00ca76b8106eb738161dbb96c130b12eacfe2956b536ca8e8ef59691f513816011866320e0e77daab2 CosmicDuke18D983BA09DA695CE704AB8093296366B543996A9dc3d5da2f68b4ed9336c5b78b95578005637ef950feaeb0944d9fccca38eeff38e366c24a137ef08c9f1442aeb6afb7 CosmicDuke1A31245E943B131D81375D70B489D8E4BF3D6DCEcce1577e03093dcf195449d208e544d70314ed09890d5aa2dba659fe1343be93d48c3875a89e261484967fea7ea6c7eb CosmicDuke1CE049522C4DF595A1C4C9E9CA24BE72DC5C6B281270217794b67491365048584a27a5ed0a013787f9c1731213059f2d8e1a7514f610783aaaea8fa5736063ab7793c0d7 CosmicDuke1DF78A1DC0AA3382FCC6FAC172B70AAFD0ED8D3D39e1b41b4118f4ea3ce2119c054b29e852d1b5387739dcf6a68efb21e8ccf83b9b29fb29724091d7a8084d2315f81d80 CosmicDuke1E5C6D3F64295CB36D364F7FA183177A3F5E6B7E868915de8b23cfc87765525efbdb4fa01c86bcc74684c2533026a8b4d9463ad4b5a1f30f6915ca19197b41e0cb893b77 CosmicDuke2345CD5C112E55BA631DAC539C8EFAB850C536B20b78ad10bb56a3f69f13297e427806cf2c480399bff7d05736caa1858fd43d9223df3fd531ae574dc3c9eb06cc3579ef CosmicDuke2B1E7D54723CF9EE2FD133B8F17FA99470D7A51A2c6a49568e1733b66ef9dd2fa659aedb182ab7eb1dce2827a05aff0d83a13dd8346bd3b8ab2dfb681817a0d3aab05b15 CosmicDuke322E042CF1CB43A8072C4A4CBF6E37004A88D6F7b5304f94cd5baae6fb5dad19c2759d2c55ba0c04d488903e07f0747407ed56319f0d9aac113c7f9c62287442f1f78c45 CosmicDuke332AAC7BDB0F697FD96E35C31C54D15E548061F4dee4b9c620a390be143a79f555225c85ffc6a96b542196dbe322de199ee7b2621966d4c0d32ab43f78b9516a3576da09 CosmicDuke365F61C7886CA82BFDF8EE19CE0F92C4F7D0901E0295fb28f715a19e2b0c497b5dd55629cae1277446cb62f1ed3674e7ea87063a28b9d364e3638fa779fe8e3d6e1fb15f CosmicDuke3980F0E3FE80B2E7378325AB64ECBE725AE5ECA952c73a7801a186077ed27a4cb7c7f8872e8aa9dac584a51c7d960baccf76747c858175573f5c013b7c44328f0871da04 CosmicDuke3F4A5BF72A15B7A8638655B24EB3359E229B9AEA8019dea970331823a504baaa90d3470f82670519b8d63d36967c611bc94659e5bff867837129ac93bcffe7589af46384 CosmicDuke42DBFBEDD813E6DBEA1398323F085A88FA014293933b3c5d3728ef6e08af4ae579c00d1147f3405ab0da5af125bcc6ebb6d17a1573b090c54d7a0a00630ec170ccc4b9d1 CosmicDuke4A9875F646C5410F8317191EF2A91F934CE76F5768f6d84ac9a28c2fea59ff5e045779115ef73d904cf5dcbec5919fba0b640168d6feb8f7021507568297e3da1a7e47a5 CosmicDuke4AAAC99607013B21863728B9453E4FFEE67B902Ed22c02dafb1ee0ef8d4ea90ac48a6988f61cdc7f68f47d23c4571b517ab4cdcfd984cf3f6f8f91dec99dfd7dc5a2dcff CosmicDuke4E3C9D7EB8302739E6931A3B5B605EFE8F211E519d95c8f09f991a5fc37b79c45ebd20433c5d2fcacafc21d9f43c595ddf03bec801ccb958b8641018612c21bc741800d0 CosmicDuke4FBC518DF60DF395EA27224CB85C4DA2FF327E98ad02edae5173d0b7ba39a3065c9d5d63b7c4b998d7ebea62b81f2a12c5e8608a21079a0bcecdef81c0f5818a80b0c7eb CosmicDuke4FD46C30FB1B6F5431C12A38430D684ED1FF5A7575d15f552aba5ed0df80ec2c16ab683ea1176b60ca96cfeb37dde61bde935f645a64fabd8e300f072fc355434b711dcf CosmicDuke524AAF596DC12B1BB479CD69C620914FD4C3F9C93c0ca0ab63a76dbf836725c95e2a5b7a75e8567e7667eb02eec661134ecc07a7970d9448fc5b7dc021b5bcb039953a47 CosmicDuke541816260C71535CFEBC743B9E2770A3A601ACDF6629b432266d78f9eb74d2d1a71d0d32831267e0977becf098b5064aac6fd39b5f8e6fd975c06d4b8540cea71d402317 CosmicDuke558F1D400BE521F8286B6A51F56D362D642781325400d3db044befebbc39087ee1fe9533fede980fc70a86f949828b834edc0847490d497efcbd3a1155b7d3afe7c32543 CosmicDuke55F83FF166AB8978D6CE38E80FDE858CF29E660B8e5106565fd96df1308d208d1e3426a37e371cd323898e403df7a80add34d791e160e443bcd2d02f27ddc0c04ba1bdab CosmicDuke580ECA9E36DCD1A2DEB9075BCAE90AFEE46AACE2351c913e4120081d8f04317121654a391590bdbaff2c178387e924b689b030057b4cbd2865e9c4dd3886a8791ac8e4ee CosmicDuke5A199A75411047903B7BA7851BF705EC545F6DA9f22606385080d35551e7f8e8f49b7de9fe5bc1248fc79fc15663ef169f0a269c1abe847d00b01e9571fe5c0d760d68f0 CosmicDuke5C5EC0B5112A74A95EDC23EF093792EB3698320E3729a14be6b3a92265cf6d8e14c79abe64e3a2bba82027dd6ff631fa5890a7ba8331b62a0a4c0b1ca24d143c2b61c323 CosmicDuke63AEDCD38FE947404DDA4FBADDB1DA539D63241789c6c5439a2747d7f2a7305521dddcbb027c9da59c77e83b42535a0c965c4994a144715e796453fc2a5b189f0036c4b4 CosmicDuke6483ED51BD244C7B2CF97DB62602B19C27FA30591e417aa350346731f6e0c936d725f1a58290b324f5cdb5c3ea17fa48a74bc11c856f0da0b049d07d9316d161f71f26a5 CosmicDuke658DB78C0CE62E08E86B51988A222B5FB5FBB91318edd6bc785e56990f6721cd553c24ad38c0252f75b1c6b3980e40bb69cb932773a6e0b189fc8a80efc2dcb455209eab CosmicDuke6A43ADA6A3741892B56B0EF38CDF48DF1ACE236Ddc92eba92885f2e937cb6f694647eb713d37e753812687fb7287cf8644d13fe2673ea7c3b540637c1ce1c6819f1c521b CosmicDuke6B7A4CCD5A411C03E3F1E86F86B273965991EB85cd012e8f5340d2e148d2c2cbac4270a192172ff7bfeee332409a145bc626bebf732225d006877168f35c046368e5118c CosmicDuke6DB1151EEB4339FC72D6D094E2D6C2572DE894705a7659b691a3caf107e6636d8906dcb0334ed05005ce829224d0dd4cc5baab6b837cf02ac0e321c8f97d11b3ba1c77a7 CosmicDuke7631F1DB92E61504596790057CE674EE9057075520d86cb4ebbffb739faa47f7354ee134d5f1d8d2629b91744fe812207cb3f0bebfd1aec9937b7744a263d1a4e3421063 CosmicDuke764ADD69922342B8C4200D64652FBEE1376ADF1Ce175be029dd2b78c059278a567b3ada12146da9bc0e27d7eb10983b7dd89f250fa0015ce284dde8f0bb6a79626d34a2a CosmicDuke7803F160AF428BCFB4B9EA2ABA07886F232CDE4Eb59199877e0d68a5e93fc8ea76374ed15b50e26a01b320f05d66727e9d220d5858cdac203ff62e4b9ced1cafc2683637 CosmicDuke78D1C1E11EBAE22849BCCB3EB154EC986D99236423273a83bfd7aed10b9403e23a8bcba9f6c62f9f846b3d100d60b1f2ae57a71c91dd8dc215dce652e2c85dff60c0197f CosmicDuke7AD1BEF0BA61DBED98D76D4207676D08C893FC13925b37a936304a5914941ac4584e346c29585bb17b28e8b15b2a250be9516f416fa7cac84cc24aa4e004f6987323147e CosmicDuke807C3DB7385972A78B6D217A379DAB67E68A3CF5fa3b44b8a4a2a2b473cd5d934d1ec4bc1c348f1582385bfbf030abe20caabbd289d0f48a4076b1b6ccc417864070e9fe CosmicDuke88B7EAD7C0BF8B3D8A54B4A9C8871F44D1577CE7664b149ae8469cbda7fd7ed48c7dc9b64f9b6a88245f782d81e9eec9315b9444c83d68941f9fc23641e3909c8da9db9d CosmicDuke8A2227CAFA5713297313844344D6B6D9E08850932a998ce2750335079d73e6b2eb2bd011008beba8635e24baa50beee2e98654f73c04476a06fdcb893655f0a8201932d2 CosmicDuke8AA9F5D426428EC360229F4CB9F722388F0E535C1a874e5ecd67dffab45e17e9b730daed51b4e69183f3d02124f3314cc64a7869425f053d8021c74c12f21d7c2afe2163 CosmicDuke8AB7F806FA18DD9A9C2DC43DB0AD3EE79060B6E8d729fbb50665932fe529f7073acca9c19ce93f04dbb6a3b833f1146a54dadfdc224fdf24e3cca1f8a1eb4e902d597ff6 CosmicDuke8F4138E9588EF329B5CF5BC945DEE4AD9FEC1DFF50a56d98be79a1e6f04a1964e170a5d71005b40f977b92cbc01b7a66558ff0621cbaf36f7b4b2ab2ca3c3a267891bc8d CosmicDuke9090DE286CE9126E8E9C1C3A175A70AB4656CA09baffad69d3ce95853a6db80711b74a38cb0d78c79ad46c04e7ab66ca95588db8ccde4d2710a171585b0276736aa4e059 CosmicDuke91FD13A6B44E99F7235697AB5FE520D540279741d34c6d5875f5d2aab929d1f7ce9688600dc70c0f2ed18c813a89c59686f375787ba683b549b1e6bb9aee6ca33be64bfb CosmicDuke926046F0C727358D1A6FBDD6FF3E28BC67D5E2F62bd46a980dde8eaa13e3defffb87e1e0f6af08e31471c98adcc26f9916e26d41aa0c47ff94949d3174d55c320032be26 CosmicDuke9700C8A41A929449CFBA6567A648E9C5E4A14E70608b22fcd2d067730176e335d3c6454b4fc0bbb90aeecd3229aa932437273ba59f887a6eac569b56693602b957e205e2 CosmicDuke97C62E04B0CE401BD338224CDD58F5943F47C8DE37c394e3e15d211a050446bc90edac94ec49400e70c02a884a5df74ca99690886ec2d528e200c42dbdf057fd9b7f87f8 CosmicDukeA2ED0EAAEADAA90D25F8B1DA23033593BB76598Ecf2041ddfdc177b863a23ab7ade780434e9942bddfeb3369897c58d9b8fe2478c1df96e5b13733bfb24d975282685c29 CosmicDukeA421E0758F1007527FEC4D72FA2668DA340554C975c97ca9b085411af1860523c3c884b585d75a3eddc2f849e1dee40b47629ea0d1e3a1da6ba3cd9078177bb61a63f4fd CosmicDukeA74ECEEA45207A6B46F461D436B73314B2065756704381812f4cc3c5b3875ea33232c842a7b230593aa43c701c30862d3054b4510ed1dea1fd5f219b1c3bc11321bab73b CosmicDukeA7819C06746AE8D1E5D5111B1CA711DB0C8D923Ed47b25667effc0f88ab460c6edeecc5530b24935c8537c51ce56a69510019d8481ac78e6c5ccdbe792c625c69c5358f9 CosmicDukeA81B58B2171C6A728039DC493FAAF2CAB7D146A535c6928790ce08309af997654ed6d7197d9296ac474b991780b41f654b557e01ba93ae932ba717146e60c1b9ed579539 CosmicDukeB2A951C5B2613ABDB9174678F43A579592B0ABC9b2737204531a80c31bb30e9be9a1cc4c7c2bb277e3a982e9e2f76da2c96119514dde4f3e36b16eca5994be5f28bd0029 CosmicDukeB54B3C67F1827DAB4CC2B3DE94FF0AF4E5DB3D4Cf611f8b0655a8980cf71a252536c7a5a16870c6b572934f5a106d5f632b6d41bb23924c12ddf172be24c6dfca25226b1 CosmicDukeB579845C223331FEA9DFD674517FA4633082970E2337a4fa99547eb0cf7600601ab44dda73aac0b568f83746c9a54a2a6fdd2984c3e6f8d0c77a681c219abb9480859197 CosmicDukeBBE24AA5E554002F8FD092FC5AF7747931307A1526e8b95dfbc6a8aafe40ab84b1d2ab5e910a016a7b6e0a76bc7ddf12f9135090e0b23d00c382d70084b46bea4bbbcae7 CosmicDukeC2B5AFF3435A7241637F288FEDEF722541C4DAD8345adb4594e3a2b02041c7e2b5fde46bbf012045464ba2aadc1547940eb3ce262d0e023c2198c134dee658c859ecd8ab CosmicDukeC637A9C3FB08879E0F54230BD8DCA81DEB6E1BCFbc304fb92a79bab73b75772427d14ffa4203168c1bad752af7f39f8fa8eae4e8a5e41f39892abffa804d52a008e2dfd7 CosmicDukeCBCA642ACDB9F6DF1B3EFEF0AF8E675E32BD71D19003e1d69cd29280d2233c1634370c60a38e41831d495ceb07dd232506447c62203ab05fe9e15e2b2a6a74aa9b0b0e96 CosmicDukeCCB29875222527AF4E58B9DD8994C3C7EF617FD80be02d5f66f84ebd03f362ad4b4a06e604819cde7e928e6ff376daeb73b894959f672a85b363753c227416fc0f4a8acd CosmicDukeCD7116FC6A5FA170690590E161C7589D502BD6A737369a91ad462f1fac9004f3a86bb3ac4bc8280a99d07165055fabed11049d8da275f27f5d8cffc4ed10a68be2d0cb84 CosmicDukeD303A6DDD63CE993A8432F4DAAB51327327488433adea70969f52d365c119b3d25619de9c9f5a19c7b11fd866483adc93aa5bc4bd3515bd995ca79297b227e3e5ef1a665 CosmicDukeE60D36EFD6B307BEF4F18E31E7932A711106CD4461c6d0076ee4187f9ec31841aa645d422eafc64769c500d635b7225c9b1411db8f50db8618e4d5807e1640b641a2f5ee CosmicDukeE841CA216CE4EE9E967FFFF9B059D31CCBF126BDf239e79e87f09000c247ff7e91ab96036322e8bbb5a7cc542a7da0fb33a60fc7443bcbd8601b828c9c7f138c71cce090 CosmicDukeECD2FEB0AFD5614D7575598C63D9B0146A67ECAAedf7a81dab0bf0520bfb8204a010b730bd4928921ddadb44f9f573da61dac034533bf14fe38acd5754f3ccec1d566300 CosmicDukeED14DA9B9075BD3281967033C90886FD7D4F14E5acac7584d7dc066d27555997d0f6d6cf9c2562e05eb940ae8d73c9baa7cfe85cb3ec619689227f65e4fbeeb3fec598ad CosmicDukeED328E83CDA3CDF75FF68372D69BCBACFE2C9C5Ef5cc1c0c90fb89e4b4fc048c5a03b46f43bcee4067c067d9063ddfc101fc8b5a6e8d42184ef8b0fdd9bb14102cb9973d CosmicDukeF621EC1B363E13DD60474FCFAB374B8570EDE4DEd824cbf08604dea9724ab8e707bb9fec68355d29ce79a5177084fe6292f0f8b9daa2018c571b552fff9f4a0815b432ce CosmicDukeFBF290F6ADAD79AE9628EC6D5703E5FFB86CF8F15080bc705217c614b9cbf67a679979a8f21794d0b0938643e2aabe9f2ed762528e631a2ebda76020d0b59ce91fb51e41 CosmicDukeFECDBA1D903A51499A3953B4DF1D850FBD5438BDdffcd7f930f8874dc9f5115d0ae50b573e889cd495e008760fd12751d6d45cadf8a7280c4545f2ebe469f84b9b77c835 APT29_2015-09_FSecure_THE DUKES7 years of Russian cyberespionageCozyDuke CozyDuke01D3973E1BB46E2B75034736991C567862A112635b4250a6bb4c6915ce962d489ee912d6637cabc343e3ed5b447dccb13aa7caf4d3a3eb3cd617d360167f270ec34596ea CozyDuke04AEFBF1527536159D72D20DEA907CBD080793E31a42acbdb285a7fba17f95068822ea4e4464c945c88ac9a4a22e86f0922f18c164e87f26c3f3fa054eb488fdd7d4bfc8 CozyDuke0E020C03FFFABC6D20ECA67F559C46B4939BB4F483f57f0116a3b3d69ef7b1dbe9943801fdd7e8582ef8d7a23f269653435582cfe924ca9b2db34af63af5e57d1f3e09c2 CozyDuke1E5F6A5624A9E5472D547B8AA54C6D146813F91Dbd52b2a371ff397c90b891b7a4f04c66b9c996b06e0db273a4edede3fd6fda2b40b2e0201eba3e8ac581d802fc610a4a CozyDuke207BE5648C0A2E48BE98DC4DC1D5D1694418921914d779777af6eb7c556ae338b462c48db9ea2cc39808780ade1fe51287072e958448be7e3a7b32bfd48438453592018c CozyDuke23E20C523B9970686D913360D438C88E6067C157f0a6436ffee12558a434a0fc24b3b33f5f827730c7bd155997121f023ca9775077a37a58111738fcb3213757170bd860 CozyDuke25B6C73124F11F70474F2687AD1DE407343AC0256332176672744320e9fee2117b059193d469000ca9e6af92876334e3a460ea4ac8a61c1a6ee819eefbfd0c79ea4fb315 CozyDuke32B0C8C46F8BAABA0159967C5602F58DD73EBDE90e0182694c381f8b68afc5f3ff4c4653c1b19af1e354f13c90163780be6ad50f02d5bf8bac1c9cc1eab1377a159de1be CozyDuke446DAABB7AC2B9F11DC1267FBD192628CC2BAC1991aaf47843a34a9d8d1bb715a6d4acecdc70d3046b59785b2b9b7091e26f2484ba7a488dba420a8a05be388a337c399e CozyDuke482D1624F9450CA1C99926CEEC2606260E7CE544fd8e27f820bdbdf6cb80a46c67fd978af7f4d18dbc0b822b89ba14ffea24114f92b593be0f287f300bb269b310883039 CozyDuke49FB759D133EEAAB3FCC78CEC64418E44ED649AB08709ef0e3d467ce843af4deb77d74d5bc7bcb663477238508ce8ad366cc9a77811c7f5eabaec47175858fe972639f40 CozyDuke5150174A4D5E5BB0BCCC568E82DBB864064875102ef51f1ca11ce73fa20b54a5886ad1dd89996b66d5a339939b2072d29675ec3ca6d793f42a5d335a8ea7dab8773321ef CozyDuke543783DF44459A3878AD00ECAE47FF077F5EFD7Bd5a82520ebf38a0c595367ff0ca89fae70ae2363191e8b20d1773ecc73afc2b9a5dd8247c7b97eecfd1378f3e7aabf92 CozyDuke6B0721A9CED806076F84E828D9C65504A77D106C57a1f0658712ee7b3a724b6d07e97259bc5625c674f08cca18e73eb661eed0182ef16e27983098cf1c61892ca621d60b CozyDuke6E00B86A2480ABC6DBD971C0BF6495D81ED1B629556b9eca4a85f52e2f3176c306e1866112e1139ef422c2c0884fb5b1786a8489c1769a96880a30406e4a28b76ea4a73a CozyDuke78E9960CC5819583FB98FB619B33BFF7768EE861181a88c911b10d0fcb4682ae552c0de3a5373b33ac970dedeb52528b123959145bf51c95b159a30a7823ad8018ac4b41 CozyDuke7E9EB570EF07B793828C28CA3F84177E1AB76E14ac7a22d1af180c21b0061b8d512586d3f6d52c5608931cdf66d71502fcf012b6781edde64ba1f956c1868f7e36d8c8d2 CozyDuke8099A40B9EF478EE50C466EB65FE71B247FCF0148670710bc9477431a01a576b6b5c1b2a1233cca912fb61873c7388f299a4a1b78054e681941beb31f0a48f8c6d7a182b CozyDuke87668D14910C1E1BB8BBEA0C6363F76E664DCD09f58a4369b8176edbde4396dc977c900830c69d91247f8a72a69e4d7c4bce3eafba40975e5890c23dc4dbe7c9a11afa73 CozyDuke8B357FF017DF3ED882B278D0DBBDF129235D123D3d3363598f87c78826c859077606e51401468b1d3e089985a4ed255b6594d24863cfd94a647329c631e4f4e52759f8a9 CozyDuke8C3ED0BBDC77AEC299C77F666C21659840F5CE23e8510a7ae4919a3fcedad985fbbca35218c0b02776487babbf6219cdaf97cbf2b534e0cf87a527228dda2d4a468a257f CozyDuke93D53BE2C3E7961BC01E0BFA5065A2390305268C90bd910ee161b71c7a37ac642f910059ff9edb92ee8125519aa1eea60cab9999bcd4caa87b891882caddc73a2a5ae9cf CozyDuke93EE1C714FAD9CC1BF2CBA19F3DE9D1E83C665E2f02da961eb7b87b41aee5fd9537022f0ac4ffc7a2ba8840a20f6b07aa44328f1802b79ced6a56b3ac7e78fa1178ba65a CozyDuke9B56155B82F14000F0EC027F29FF20E6AE5205C29ad55b83f2eec0c19873a770b0c86a2f7cdb9c2e8b6ca7f0a683a39c0bdadc7a512cff5d8264fdec012c541fd19c0522 CozyDukeB65AA8590A1BAC52A85DBD1EA091FC586F6AB00Af2b05e6b01be3b6cb14e9068e7a66fc1036c5c0075d67f67fee546321f5b9c4f00d37aa9249ffe1627e71946bad4a3d1 CozyDukeBDD2BAE83C3BAB9BA0C199492FE57E70C6425DD3416db420e781c709bb71acee0b79282f4bcb2a5d99297b30f8ff00e08cf7330d5e2f69fc602bb317bf8e9f703a137a99 CozyDukeBF265227F9A8E22EA1C0035AC4D2449CEED43E2B1dde02ff744fa4e261168e2008fd613a418a21d49fe5bca8a3e050f039a0e2aa03db6d2de0fb49e3ff9d987f31b22dda CozyDukeBF9D3A45273608CAF90084C1157DE2074322A23043c012086c1ae0a67c38b0926d6cba3f3dea35172449f0b9a86dff9af3b4480cc4c37a30e8cb54963ff91c4c1ffe7b0d CozyDukeC3D8A548FA0525E1E55AA592E14303FC6964D28Df16dff8ec8702518471f637eb5313ab22b160b7eef5ce5fdb83889f96fc40cbbbc7b85450ff2afdf781a8eb5d6a0f541 CozyDukeC6472898E9085E563CD56BAEB6B6E21928C5486D98a6484533fa12a9ba6b1bd9df1899dc9891b5586cede16aa1e1b87380621f68e8956b991cf7675bbe18d2ec61a7522f CozyDukeCCF83CD713E0F078697F9E842A06D624F8B9757Eacffb2823fc655637657dcbd25f35af8262dbadca239e5259161130ac9f0f5ef50691fd9dc3e3490b6c0d7b76e7ee34e CozyDukeDEA73F04E52917DC71CC4E9D7592B6317E09A0547688be226b946e231e0cd36e6b708d203f0ebe892ab87ea24db172ae96cfc216b591d3967821c9d2581a9e11faccde28 CozyDukeE0779AC6E5CC76E91FCA71EFEADE2A5D7F099C80209a4a102a977b698544c99d8236e9ca86056f462d5783604b7f050047db210ecf698e72f3664b27d58265663ff5b324 CozyDukeE76DA232EC020D133530FDD52FFCC38B7C1D766262c4ce93050e48d623569c7dcc4d0278f44bead117d2cf34b8e50b81c82fbd1b938b94387cdf84386ace46b1f3b5df1a CozyDukeE78870F3807A89684085D605DCD57A06E732712575457cc94b1d1dfa3f5d1aedc2edb0446eeffe540693418a107db3e7d2d9b72a54b2354aa6886b571272aa41f8cc8e0c CozyDukeE99A03EBE3462D2399F1B819F48384F6714DCBA11a262a7bfecd981d7874633f41ea5de8099524703c250d1d1a16288dbd2f425d6cd0491f608e207a82f239b39bb26b7e CozyDukeEA0CFE60A7B7168C42C0E86E15FEB5B0C9674029eb22b99d44223866e24872d80a4ddefdf722677df4fb7eb4ac986a944d4f6630b91ac22b31f8d39ec9bf941376d5d4db CozyDukeEB851ADFADA7B40FC4F6C0AE348694500F878493b5553645fe819a93aafe2894da13dae71a7239c006a3adf893bdb5c2300b2964ed8bb454e1b622853e4460707dc63c16 CozyDukeF2FFC4E1D5FAEC0B7C03A233524BB78E44F0E50B9f65e3b320ec91380ebc28d4fdff48958a5d8d103cb175d7dc41932ef9a890997e25dbe15f94ecd2105835fe49779354 CozyDukeF33C980D4B6AAAB1DC401226AB452CE840AD4F407f6bca4f08c63e597bed969f5b729c5665fa52f632e4e83ff83120c7df6b90291025a76d5daeb183e814ec0b3bd2bd4e CozyDukeF7D47C38ECA7EC68AA478C06B1BA983D9BF02E15a5d6ad8ad82c266fda96e076335a50807ed2d1aceab5f54df4acca63b5d269842d49521e13bab5e652237667c7eef261 APT29_2015-09_FSecure_THE DUKES7 years of Russian cyberespionageExploitFile ExploitFile1E770F2A17664E7D7687C53860B1C0DC0DA7157Ef81f858335b253d4708fbdfa6ca92ee9b219c95fac620b25fdaed082a0bc93644443d236e9173829214d587d17a32a87 ExploitFile353540C6619F2BBA2351BABAD736599811D3392Eab7a66ed3c6de1b7449d6054a8b46d7f8cad0a40dd87e5d77e5c939bd7ea838c3549c44b525e2f4a1227d53c4af925be ExploitFile412D488E88DEEF81225D15959F48479FC8D387B3335160cad23e28d4597c1546458042c4afbd1f13132c2f047861b2ea90c18d546a326dbfca4dfeffd8b4ebf852204275 ExploitFile5295B09592D5A651CA3F748F0E6401BD48FE7BDA6571a2d3892ca937697e96f8bb795e428c6c57f7e9c81fcf194d17a752f8da4295fab5dad8eb79bd289256b9cdb7415e ExploitFile65681390D203871E9C21C68075DBF38944E782E86542cd548182d6adc08a63c942f9bc54880ae80fdc874002a6d9c807802794d4a35c384551d73bb36277b2f1e63d67e2 ExploitFile74BC93107B1BBAE2D98FCA6D819C2F0BBE8C9F8Afc0e380447be2bbdf9f06fc3358f8648b3236d1d0924cd9a17babd13209fe6706fd3a9228f22fe658eb4eb0c71360b73 ExploitFile8949C1D82DDA5C2EAD0A73B532C4B2E1FBB58A0E23d2592db15c251382706515cf4fd37e7e9c0bda27bbc80d947bc0c6ce29a19c824288d2b481f92a1637b7b8dfc8b81c ExploitFileC671786ABD87D214A28D136B6BAFD4E33EE669512aa2a6e004159b9e3a590c63a0cc47b3ba35aa14ccc0e4fa8e47b621ea1d1efe1b012b623afd469e56015c0857fec646 ExploitFileF1F1ACE3906080CEF52CA4948185B665D1D7B13E84137c8e7509a0e9cf7ff71ba060cdb5e745fc57f816b2b507406ce1c0ec47f8f84d8f5efeaf327c657723c897522c83 APT29_2015-09_FSecure_THE DUKES7 years of Russian cyberespionageGeminiduke Geminiduke3ED561786CA07C8E9862F4F682C1828A039D6DD4e36d73c6c8e832b7955c442b484472e51323e3d7656a427733663f03b3037326ffa9c57c68fa8e014a5bf7cb1455359a Geminiduke6B0B8AD038C7AE2EFBAD066B8BA22DE859B81F987ad50c9e4a4bab73bba38860906220b6bc54acf4e60688ea668ef40ef965f2bad41dcf260ddae26d28b5551461c4b402 GeminidukeA3653091334892CF97A55715C7555C8881230BC4f1583641033d66873ed1604e2f1bea1ba8b01a219a9fe565aadf82bc28b60048c60b640e780386c7a84a425049df5af9 GeminidukeB14B9241197C667F00F86D096D71C47D6FA9ACA66d45f34e6d29391ee6f0e91bf344a7d0ce2c4dd21b99407bfa7066a6a57d180c00527e7db8ee52558c597550ac8b5d7c GeminidukeC011552D61AC5A87D95E43B90F2BF13077856DEF6f5a73931c6c109bd6504a5ee0476ae77b9e542426408aa384d0394820f82f330e615a1ad17a777d04720458b33b08a3 APT29_2015-09_FSecure_THE DUKES7 years of Russian cyberespionageHammerDuke HammerDuke42E6DA9A08802B5CE5D1F754D4567665637B47BCd3109c83e07dd5d7fe032dc80c581d088995535721ebeaf6983c6cecf3182d756ca5b3911607452dd4ba2ad8ec86cf96 APT29_2015-09_FSecure_THE DUKES7 years of Russian cyberespionageMiniDuke MiniDuke00852745CB40730DC333124549A768B471DFF4BCcf59ed2b5473281cc2e083eba3f4b6623d0b1f970eaeeabf9372ffc1ad7e61226632904cf0311ea8f872ddbfd34a3a2a MiniDuke03661A5E2352A797233C23883B25BB652F03F2059f13dc03904dbd45374acc21344772736e57c69963562d28a3a9da9f9103c199c909d0baa185a5d21e1b200a5a14ab72 MiniDuke045867051A6052D1D910ABFCB24A7674BCC046CAff83dad77ac2b526849930f1860dfd3fe961202d84aad7fa9faaeb63651735416612d25c611a7a025e2eaab67c79e272 MiniDuke0D78D1690D2DB2EE322CA11B82D79C758A901EBCc786a4cdfe08dbe7c64972a14669c4d1abfffd23c81b6301675567622ccee08cf578ce91f372fce68cff8fc1dbc3053d MiniDuke0E263D80C46D5A538115F71E077A6175168ABC5C78e51be60eab2c6e952c9538a46ab52105e4224d4dd4e5fbd381ed33edb5bf847fbc138fbe9f57cb7d1f8fc9fa9a382d MiniDuke103C37F6276059A5FF47117B7F638013CCFFE40774593127f50abff5327b3f7038b456d255129d34050b2c028de564e3166611e1d148c26de0972cbe047caf530f118468 MiniDuke118114446847EAD7A2FE87ECB4943FDBDD2BBD1E4c6608203e751cf27f627220269d683529ad305cba186c07cedc1f633c09b9b0171289301e1d4319a1d76d0513a6ac50 MiniDuke15C75472F160F082F6905D57A98DE94C026E2C56738c60fff066934b6f33e368cfe9a88cde8184c6850d17f90e861309828af1f7b7e3b1695ebe5d303d3d4b6ef4ba1218 MiniDuke1BA5BCD62ABCBFF517A4ADB2609F721DD7F609DF48bbce47e4d2d51811ea99d5a771cd1a1f19bd932336fa721e739b32c07b67c01ea4bd0ebc70e92a70f41e51f4668a0a MiniDuke1E6B9414FCE4277207AAB2AA12E4F0842A23F9C1a4ad6b55b1bc9e16123de1388f6ef9bf7889fbd40f65cfe21d0c7486b29eb4c5042abff4ac660c12c7936831445cfd6e MiniDuke223C7EB7B9DDE08EE028BBA6552409EE144DB54Aa67ad3e2a020f690d892b727102a759b35c08566dc38ad65e906b3683ace98e5beef855aeedc611a0317a72eee193539 MiniDuke28A43EAC3BE1B96C68A1E7463AE91367434A2AC4297ef5bf99b5e4fd413f3755ba6aad79c60621e82f58b5ea5b36cde40889a076cb2c7f1612144998b1d388200bc7e295 MiniDuke296FD4C5B4BF8EA288F45B4801512D7DEC7C497Bb8e89f9908262b5385623c0e39d6b9408e28dcf7fd7ce1ad9a65c186e09a7843ee31af924509148f085958cadfdda8fb MiniDuke2A13AE3806DE8E2C7ADBA6465C4B2A7BB347F0F5561017f887865b8d13f85c5474cdcbb8dfe146fffd2ae59172f52048f7e7d231807e0d732e19bdb443820a8305165741 MiniDuke2CEAE0F5F3EFE366EBDED0A413E5EA264FBF2A33441ee6a307e672c24d334d66cd7b2e1af4b01a3a299b09d2b4418cb66e80c34e3ec04016ed27199c472515cf95a023d0 MiniDuke2D74A4EFAECD0D23AFCAD02118E00C08E17996ED73931351f883cff5dbdcc54cc4eb10a715101f74f974e3e80cc37805ebe5cc2efed77bb5745d82e1b44b1da4f0c83691 MiniDuke30B377E7DC2418607D8CF5D01AE1F925EAB2F0372dcd049c591644e35102921a48799975354786c5df71cd090c96d1328b4e31cd28b8ddc77904863d100b6c35ad235b69 MiniDuke31AB6830F4E39C2C520AE55D4C4BFFE0B347C947ffefe16d581340c1e49f585a576a1fd8764f8c8f8832954c99fb0c2ac5ac5d89506dc5dc50310c9112318b75e9f9e2bf MiniDuke36B969C1B3C46953077E4AABB75BE8CC6AA6A327ab2d8a0d5b03d40f148f2f907b55f9f155265193d63d56553e8e135e9a60d7d7c13cbf9d82ac25f84306ec98d74725b0 MiniDuke416D1035168B99CC8BA7227D4C7C3C6BC1CE169A811f66d6dd2c713073c0b0aebbe74ce84809c2c7fa19acfa011f97946205f979afb54ac2c166f48ab35a20cd9d53a2ca MiniDuke43FA0D5A30B4CD72BB7E156C00C1611BB4F4BD0Ab100d530d67cfbe76394bb01605673829c13a32033bc7dd06016651b0f21a2bed9be1dc40c6879f925c71e05f4f1c8f7 MiniDuke493D0660C9CF738BE08209BFD56351D4CF07587786ef8f5f62ae8590d6edf45e04806515a6e2852f2e6701656da74adb412cd0850b0d27750803613223be3eb5ac5cc26c MiniDuke4B4841CA3F05879CA0DAB0659B07FC93A780F9F18d3542af992b1de4cf1f587f61dddb50f151f5a656d43a76a07fa03166906d51f9683b27b0e9b86464e3a68e9dba1fac MiniDuke4EC769C15A9E318D41FD4A1997EC13C029976FC205d10323111f02233163a6742556c97462a2df9d001d3e0f222d77b6781eb279761f1354570773ef1929a86557a11454 MiniDuke53140342B8FE2DD7661FCE0D0E88D909F55099DBe990e0d1ee90cd10c4be7bfde6cc3e5acc6ad212f50e0a7a708bb1b63a01d8932f471618cdda69b2e12106ae112b2415 MiniDuke5ACAEA49540635670036DC626503431B5A783B56c519eef57001ad3ae60cdcb0009bf778acd886fa7b9117807f1e11f0f38b9fad1afce51aa9cfbe3810a39d883d0ca663 MiniDuke5B2C4DA743798BDE4158848A8A44094703E842CBe863737773f64498091cd775c7abde66ecc5e2526ca32a447c862612b71c1db5675a759897e680573fa143ac0a8e662a MiniDuke634A1649995309B9C7D163AF627F7E39F42D5968b8088f6594dd8cba31b4f52a2d91f40e5569b85532adb1e637f83c997910924345f10aa9c2948b3d26be13eec6cbeb8b MiniDuke683104D28BD5C52C53D2E6C710A7BD19676C28B8e1a659473ae1e828508309b77da13783830ee990a6d4aaf00bb051704c93b468792561e8dd6a6ed4662f6032d38dd37a MiniDuke694FA03160D50865DCE0C35227DC97FFA1ACFA486942f1dfd61d231df8acb7ed0f6310c4f0d822926f4e6aec2cf2bd7701d67e8399ccc05bc028377a275a90e06620a109 MiniDuke73366C1EB26B92886531586728BE4975D56F7CA5c92252487615d5379317febc22dba7d47f5d3a8dfa13ba8e2142a3b1d644f107cc89c7e90cda2a5543df5787f8bfde1e MiniDuke827DE388E0FEABD92FE7BD433138AA35142BD01A2ab25d33d61cf4cfbac92c26c7c0598e6a95d2895362fc8657bc90d73d77e32f09b86699eb625905ddeb45ccd6b13c71 MiniDuke909D369C42125E84E0650F7E1183ABE740486F58423bb8914078a587d08b54d16bbd527cc13794601c5bdec3d5d76de9571e6c0e0b022b9fc62907018566895e3b949982 MiniDuke9796D22994FF4B4E838079D2E5613E7AC425DD1Dded2f80457aaefe1a80a9cefd1f4645dbf210e54c65ea69ebda418f701c2c6b8aff840f31c1072d641a726cef8c7b5ad MiniDukeA32817E9FF07BC69974221D9B7A9B980FA80B6771528567b1a2f1da31d602ce1ddfd89188d457e4189017712917c5c8f900bb9072c5910c9f975c50337115f952d885635 MiniDukeA4E39298866B72E5399D5177F717C46861D8D3DF1de51ec5d2b8466f0d424e1c8dcd64541db9187b7b0e5bc97aca233f29b96295c0bc4058fdcff50df543c1f044e58836 MiniDukeA6C18FCBE6B25C370E1305D523B5DE662172875Bb68677e04fcc9103560bb0a5e5c7303f94d39845ec228ff1c84668207c4591ae0e2b6605bdf11e84916534ab09744736 MiniDukeA9E529C7B04A99019DD31C3C0D7F576E1BBD0970d2f39019bfa05c7e71748d0624be9a9419580f275b82ee091bdc3028e6e5018fdcc915fe7853d4151b44f3d7e101e531 MiniDukeAD9734B05973A0A0F1D34A32CD1936E66898C034a58e8e935341b6f5cc1369c616de37655b96b07528f762dfcb9d6936995ed4e358d29542ae756f6e5547fa3b5b7797b6 MiniDukeB27F6174173E71DC154413A525BADDF3D6DEA1FD270ca8368cd4216b1813281d3efe485d2ae4cc6834e3679e99fc93d2f5fba02167a31cf5b68a5a9ca7aa1a4b9f7cb4ae MiniDukeB8B116D11909A05428B7CB6DCCE06113F4CC9E58e48fb57ce3d9c56ca3cf6c4aed8ad0ea415f88765b88dd90e5b0502e4fa1408e06ac9552c7c8974a510e6e23a9756a45 MiniDukeC17AD20E3790BA674E3FE6F01B9C10270BF0F0E41c658719e6dedb929a6d85359c59682d91b97f3b8ef8ebc8bbd06e06927e7b38090c026f8fca77e209e69c056b042cb7 MiniDukeC39D0B12BB1C25CF46A5AE6B197A59F8EA90CAA02d87ab160291664d62445548a2164c6023486eedb5fe8a026f602507f490b4df4721e8befa65007b84c4f5b1ed95e1bd MiniDukeC6D3DAC500DE2F46E56611C13C589E037E4CA5E0527537cc28705e01af8d8006ae8308a96c2409d415e66faebf0a031350b44d5a014ab4f62f2c1a3115982d452b7f97b9 MiniDukeCB3A83FC24C7B6B0B9D438FBF053276CCEAACD2E612fba96383a5098c26fe1a222e1e7552f9834f7b7fe09d98ef7b27d3828691ed4b361d1ccbbf8e10703f9ec03b05259 MiniDukeCC3DF7DE75DB8BE4A0A30EDE21F226122D2DFE87810de1b9fa0a9396acae23dcd113a60d7815e5275ea849a9ed1f193abd8781ff7ae6b88ef6282f6a0900175a4bb59131 MiniDukeCD50170A70B9CC767AA4B21A150C136CB25FBD442530f54b87508e6f09a6bc5ab863b5db56dfc5905e7dfc67912ed164dc68c0806fdd3d7cd151415aaffcc1b7ab2f1a84 MiniDukeCDCFAC3E9D60AAE54586B30FA5B99F180839DEED7040ee4cd4be4b84f8510c04663a2500e375d40412845c4476536307f28b64c0128e1cb88a3f505bafdcd013d542fa85 MiniDukeD22D80DA6F042C4DA3392A69C713EE4D64BE8BC8b798c968cbfd53f878e13c7698610d9c12a057ca7c92cda3cd0e09efc5bff2ebd3f7d2991e999038c7f31a6ac6a95c3d MiniDukeD81B0705D26390EB82188C03644786DD6F1A2A9Ef19345e0e5aecc0da45b4c110591bdd9b55e6e10a7f46c97cd247028287ea664bacf7ec7e500a4bf4f53c9dea7625426 MiniDukeDE8E9DEF2553F4D211CC0B34A3972D9814F156AA1e1b0d16a16cf5c7f3a7c053ce78f515a1015f0b99106ae2852d740f366e15c1d5c711f57680a2f04be0283e8310f69e MiniDukeE4ADD0B118113B2627143C7EF1D5B1327DE395F118e64b8e5ce5bdd33ce8bd9e00af672cb1584a6f1059ad1c24bde2a9a8ae83ffc6679eb531d30f3f1c69f81e3a3819dc MiniDukeE95E2C166BE39A4D9CD671531B376B1A8CEB4A55f78f1359fcf04e89e3bb0fbdf74c1e05f2ede48413704b3efc4d629d3db1a1331352a0afb0d91683640dc4b4af2921d1 MiniDukeEDF74413A6E2763147184B5E1B8732537A8543658282eb6d6f20c5de6e7f4ae3a42438d2fe2672737205351df003e1969ef1ef0df9e13a9a31bf77f844236857ed0b0bf5 MiniDukeEFCB9BE7BF162980187237BCB50F4DA2D55430C2935892bb70d954efdc5ee1b0c5f97184a962ea9027514712ba3949dc3ca54559d1d42e116837dda5f9809d6523a41255 MiniDukeF62600984C5086F2DA3D70BC1F5042CF464F928D381691b297f7f5694709e21ad61ec64513a50942322977d6471f71debc6d3db38807d88778366bae6cfcae45823a17f8 APT29_2015-09_FSecure_THE DUKES7 years of Russian cyberespionageOnionDuke OnionDuke073FAAD9C18DBE0E0285B2747EAE0C629E56830C1aa8a941ec22a3ffe32d079323a2e6c40474111e44b9aa56d6e6024c6f278e915d57b7862ceb927672fc3417f76a3ba3 OnionDuke145C5081037FAD98FA72AA4D6DC6C193FDB1C127e1db6b72ec26311b175663b7d88e3c00930939256e2c2fa30e7260897d96859c08cf767664e4bd3cedf156b6765b5413 OnionDuke16B632B4076A458B6E2087D64A42764D86B5B021af534ba7bfc624c76e718ceab3477118ef0fab7757a6b5e842297fa2e0dc7a7ce084278c5d12b878bba7d90759a0e22b OnionDuke1E200FBB02DC4A51EA3EDE0B6D1FF9004F07FE739993445521ca03ac3a693625b5ca1f363877a522c924f834e442ef19d9b11ab6d3385849e60d5f310f6320e2d9e42804 OnionDuke22BAE6BE13561CEC758D25FA7ADAC89E67A1F33Ab602adb677d0560601e7668eaf158605a9e2d988781e970882fb1cee420bf01dda30730046a82f0faf4703523842feb5 OnionDuke25E0AF331B8E9FED64DC0DF71A2687BE348100E80753697172046fcfb03d6445fff1f093bd589360b299dc4803aa35abca527137a51feadae2b1e3bc2b5a301bb5b245da OnionDuke3BF6B0D49B8E594F8B59EEC98942E1380E16DD22d26ff50f81e76dffd1382fbf16783b4765a2ca760bfce4762cd1cb3623c7d5d0ff86187d3bf3ba8fdea1339585a57ec2 OnionDuke42429D0C0CADE08CFE4F72DCD77892B883E8A4BC4649609b8394283ec36ada132b02a0c6567332c2a6813d529bcb9196102ad45eceb982143e9d2f326f02cec1511954b0 OnionDuke5CCFF14CE7C1732FADFE74AF95A912093007357F89b3cf1023825cc49efe59b06092dba1d07a802eb6d2c296c3f1bc726b5a716c4a7d8e97053c53e81658a31f969e6ce7 OnionDuke61283EF203F4286F1D366A57E077B0A581BE1659db9ccc6fa0f7605f39d93487fbaba866540913b3647c28a14418a6f288be9e4d8f99048227efea8ca1b13877269002eb OnionDuke6B3B42F584B6DC1E0A7B0E0C389F1FBE040968AA65c40b01a0870250fb358efc8b201192c218b779461d83d70791e0578175503cd69128c9723f2c5d7d36b85073b0f2f9 OnionDuke6B631396013DDFD8C946772D3CD4919495298D40a4c77494cccb41aaa8849176bd58055e97afcd01e00d32dc4d1161d7a127933593cfc092ec635af5dc7a775a088b6091 OnionDuke7B3652F8D51BF74174E1E5364DBBF901A2EBCBA119aca5da05ee8e5862e1d1ee50e84cecdf818c2dccacc532ba0205749329b7e46d1f6616b40da55e0d994105bd988bd2 OnionDuke7D17917CB8BC00B022A86BB7BAB59E28C34531269e3f3b5e9ece79102d257e8cf982e09e8d86c0985530271618a342579afd1a9ecb27dfb080866e3b888bd3e45e1eb8f5 OnionDuke7D871A2D467474178893CD017E4E3E04E589C9A03a6b45a7c8fa74bc342b69e9260799603af9cfb2797bed22e1d12970d068d794270a0f07d3f3dcfdcdb9abfc3a80e0f8 OnionDuke7EFD300EFED0A42C7D1F568E309C45B2B641F5C26a5a0ac42161333e9758589ecabed3c6c47f2973f077f21abfb202b54ea18ee2a182e4305ee0046c1bc6d15a1179a43c OnionDuke91CB047F28A15B558A9A4DFF26DF642B9001F8D7ccb6d74a8577ca44ca56cfc7fa6332b649dca913ff5c4782e8f8fa2dfd161110bc5c8cd36c9ce8aa0efd1860ab668e6e OnionDuke9A277A63E41D32D9AF3EDDEA1710056BE0D423470ea4ccf2737f7095b367eda58e475e1f489d448514a3ddf30144cc1634e6623e529dd3aee54a050a920a3d4342b4b96a OnionDukeA75995F94854DEA8799650A2F4A97980B71199D228f96a57fa5ff663926e9bad51a1d0cb19972cc87c7653aff9620461ce459b996b1f9b030d7c8031df0c8265b73f670d OnionDukeB3873D2C969D224B0FD17B5F886EA253AC1BFB5B2d96b4c95152819a888deccf7ec965d6ac9c7ac457a605ff836eb6fe127eabc7a251dd73ea0a1fa59a591de30fa75d3f OnionDukeB491C14D8CFB48636F6095B7B16555E9A575D57Fc8eb6040fd02d77660d19057a38ff769366affd094cc63e2c19c5d57a6866b487889dab5d1b07c084fff94262d8a390b OnionDukeC1EC762878A0EED8EBF47E122E87C79A5E3F7B44c0f27bcdede7fe36664770dfe9f840446271c4909f39e1f29dcc79cde0f526cbde45d906726e73bd3b52d041a34eda38 OnionDukeCCE5B3A2965C500DE8FA75E1429B8BE5AA744E1416bb0f9d98eb7a832b6db1e92f4e4f1addce4b5e1c03d04bb82780a2d0f08469bb589b6fe8f0d4cc2a140b16344f5bd1 OnionDukeD433F281CF56015941A1C2CB87066CA62EA1DB37d1ce79089578da2d41f1ad901f7b10140102777ec0357655c4313419be3a15c4ca17c4f9cb4a440bfb16195239905ade OnionDukeE09F283ADE693FF89864F6EC9C2354091FBD186E80a93e5dd3a3ea22f9a9af1547f797abdf03f0ae0622f5040bf449ab8b7559a97da7f746cc2ce24a8ad5336b18699296 OnionDukeE519198DE4CC8BCB0644AA1AB6552B1D15C99A0Ed33e91246924adb5edc97ceae8a600844558eb18504f724e4f33f1504ff924ce64701d26d703cf1e42a48504e7f51927 OnionDukeF2B4B1605360D7F4E0C47932E555B36707F287BE591a5ef38c1be504fbbc88219eb39692d04bef6765408d528fdf82a46c157b44e8b5e7762a15b0264033c9558ccc48dd OnionDukeF3DCBC016393497F681E12628AD9411C27E57D48f23a89f3b7b6fa1312e6a10ede4e23a6316528ade312cc5ed76f0b44c7f2c2fc84f60ae215992d9393f57431383cf776 APT29_2015-09_FSecure_THE DUKES7 years of Russian cyberespionageSeaDuke SeaDuke3459D9C27C31C0E8B2EA5B21FDC200E784C7EDF4e315436c42e681962a8e174ef7fad480c0b939598bf5913885b1837637f166fda09d932f3484525c8cbcc0b1efba2520 SeaDukeAA7CF4F1269FA7BCA784A18E5CECAB962B901CC222a46be630c877e2885c51147de10863c11212ff6474a15402ac848d1e4b9c6ced3deafb959b59837f14b834e5d0ad15 SeaDukeBB71254FBD41855E8E70F05231CE77FEE6F00388a25ec7749b2de12c2a86167afa88a4dd3eb86b7b067c296ef53e4857a74e09f12c2b84b666fc130d1f58aec18bc74b0d APT29APT29_2016-06_Crowdstrike_Bears in the Midst Intrusion into the Democratic National Committee APT29_2016-06_Crowdstrike_Bears in the Midst Intrusion into the Democratic National Committee0B3852AE641DF8ADA629E245747062F889B26659.exe_d41d8cd98f00b204e9800998ecf8427ee3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 APT29_2016-06_Crowdstrike_Bears in the Midst Intrusion into the Democratic National Committee74C190CD0C42304720C686D50F8184AC3FADDBE9.exe_d41d8cd98f00b204e9800998ecf8427ee3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 APT29_2016-06_Crowdstrike_Bears in the Midst Intrusion into the Democratic National CommitteeCB872EDD1F532C10D0167C99530A65C4D4532A1E.exe_d41d8cd98f00b204e9800998ecf8427ee3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 APT29_2016-06_Crowdstrike_Bears in the Midst Intrusion into the Democratic National CommitteeE2B98C594961AAE731B0CCEE5F9607080EC57197_pagemgr.exe_d41d8cd98f00b204e9800998ecf8427ee3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 APT29_2016-06_Crowdstrike_Bears in the Midst Intrusion into the Democratic National CommitteeF09780BA9EB7F7426F93126BC198292F5106424B_VmUpgradeHelper.exe_d41d8cd98f00b204e9800998ecf8427ee3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 APT29APT29_2016-11_Volexity_PowerDukePostElection APT29_2016-11_Volexity_PowerDukePostElectionSamples Samples4BCBF078A78BA0E842F78963BA9DD71240AB6A6D_cldsys.dll_57c627d68e156676d08bfc0829b943316119c92f5b5cb2cd953925e17ceb4a02a9007029dd27a35d44b116ff9718f814 Samples5CC807F80F14BC4A1D6036865E50D576200DFD2E_RWP16-038_Norris.exe_3335f0461e5472803f4b19b706eaf4b54538af0a76fecc6e45e6d45c22618c52ba89bf596a0b68dd2d4d2358fb5c86ef Samples68CE4C0324F03976247FF48803A7D988F9F9F43F_37486-the-shocking-truth-about-election-rigging-in-america.rtf.lnk_f713d5df826c6051e65f995e57d6817d2d2fa32f928f8abf31b9e79153422d65fe72cd5ad0d1f815a9d2ffa42fc8d224 SamplesA76C02C067EAE26D78F4B494274DFA6AEDC6FA7A_37486.ZIP_f79caf27a99c091e6c1775b306993341f37da55a4329df13b1283cbfd237ae832cebb4b9c4ed16e5a1e0b98d9b7fdf25 SamplesB5684384C8028F0324ED7119F6ABF379F2789970_election-headlines-FTE2016.docm_a8e700492e113f73558131d94bc9ae2fef4a4319b9c37c1f05a4cbfb136c0eaf4a05476028d40a2a6bb07afc567f0f88 SamplesD5DCF445830C54AF145C0DFEAEBF28F8EC780EB5_RWP_16-038_Norris.ZIP_8b3050a95e3ce00424b85f6e9cc3ccec6412ea144bb0b8f7d32becda26cd1549825fd7b282f1f96319e5f4000e3d4618 APT29APT29_2016-12_Chris_Grizzly SteppeLighting up Like A Christmas Tree APT29_2016-12_Chris_Grizzly SteppeLighting up Like A Christmas Tree617BA99BE8A7D0771628344D209E9D8A_Star Polk.exe_617ba99be8a7d0771628344d209e9d8a9f918fb741e951a10e68ce6874b839aef5a26d60486db31e509f8dcaa13acec5 APT29_2016-12_Chris_Grizzly SteppeLighting up Like A Christmas Tree7FCE89D5E3D59D8E849D55D604B70A6F_default.php_7fce89d5e3d59d8e849d55d604b70a6f2d5afec034705d2dc398f01c100636d51eb446f459f1c2602512fd26e86368e4 APT29_2016-12_Chris_Grizzly SteppeLighting up Like A Christmas Tree81F1AF277010CB78755F08DFCC379CA6_ fhyge.rtf_81f1af277010cb78755f08dfcc379ca6ac30321be90e85f7eb1ce7e211b91fed1d1f15b5d3235b9c1e0dad683538cc8e APT29_2016-12_Chris_Grizzly SteppeLighting up Like A Christmas Tree8f154d23ac2071d7f179959aaba37ad5.dll_SayWhatBackdoor8f154d23ac2071d7f179959aaba37ad555058d3427ce932d8efcbe54dccf97c9a8d1e85c767814e34f4b2b6a6b305641 APT29_2016-12_Chris_Grizzly SteppeLighting up Like A Christmas Treeae7e3e531494b201fbf6021066ddd188.dll_SayWhatBackdoorae7e3e531494b201fbf6021066ddd1889acba7e5f972cdd722541a23ff314ea81ac35d5c0c758eb708fb6e2cc4f598a0 APT29_2017-03_Fireeye_Domain_Fronting_with_Tor8ddef83c57a5a752b20e3f98209acba42ab6c907b4fe844c01294a8dcfbc11ba966124b5b5aeb8af34a49d112fdbea60 APT29_2017-03_Fireeye_Domain_Fronting_with_Tor57e2f0fdc2566f11af661dc02e989dd65132a3f4_GoogleService.exe_31b3069cef380b4bf85e75a8885bcee82f39dee2ee608e39917cc022d9aae399959e967a2dd70d83b81785a98bd9ed36 APT29_2017-03_Fireeye_Domain_Fronting_with_Tor6842243f5a41f66a81b85ee524c3cfc7ace10da8_googleService.exe_628d4f33bd604203d25dbc6a5bb35b90fe744a5b2d07de396a8b3fe97155fc64e350b76d88db36c619cd941279987dc5