Detailed analysis of “Red October”, by itrust employees

In a press release of the 16.01.2013, the Luxembourgish Government states that a minor IT incident occured and one of its machines has been attacked by “Red October”. Immediately after appearance of “Red October”, Paul Rascagnères and Hugo Caron, two Pentesters at itrust consulting, contributed to the analysis of the malware’s procedual method. Their articles can be found on malware.lu: part 1, part 2, part 3 and Home made Red October C&C.