8/19/2019 Análise de Vírus

1/159

Tecnologia em

Segurança da Informação

Prof. Marcelo Ferreira Zochio Segurança da Informação

Aluno: RA: Data: / /

1

I. ObjetivoEstudar, entender e explorar o vírus Worm.VBS.Dinihou.g que permite a execuçãoremota de código e transforma pastas e arquivos em atalho, e ainda ocultando-os,impossibilitando o acesso a eles.

II. DescriçãoUm worm (verme) é um programa semelhante aos vírus, com a diferença de este ser

auto-replicante, ou seja, ele cria cópias funcionais de si mesmo e infecta outroscomputadores. Tal infecção pode ocorrer através de conexões de rede locais,Internet, anexos de emails e mídias USB.

Este worm em questão existe em várias versões e é transmitida principalmente pormeio de mídia removível (drives USB, discos externos, leitores de MP3/MP4,smartphone, cartão SD). Sua finalidade é criar cópias dos arquivos em mídiaremovível na forma de links encurtados que infectam o sistema da máquina host, e,em seguida, propaga a infecção para as próximas mídias conectadas (KASPERSKY,2014). Esta infecção também cria entradas na chave do registro RUN e permitir suainiciação automática ao ligar o computador.

Dependendo da variante específica, que também pode conter, em alguns casos,uma função adicional de keylogger permitindo a recuperação de informaçõessensíveis, tais como credencias de sessão, por exemplo, usuário e senha.

Como medidas de reparação, caso tenha sido infectado por ele, as instruções são asseguintes (KASPERSKY, 2014):

1) Certifique-se de que todas as máquinas nos sistemas operacionais do parque esão atualizados com as últimas correções da Microsoft e a auditoria esteja

habilitada em todo sistema operacional;

8/19/2019 Análise de Vírus

2/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

2

2) Atualize aplicações críticas que são importantes vetores da infecção , tais comoAdobe Reader, Flash, Java, navegadores Internet Explorer / Mozilla Firefox;3) Desabilite a auto-execução do arquivo " autorun.inf " em todos os seus servidorese clientes;

4) Elimine do sistema de pontos de restauração que pode facilmente repropagar ainfecção;5) Se os controladores de domínio foram afetados pela infecção, também seránecessário alterar e reparar todas as senhas de domínio das contas deadministrador para prevenir a possível corrupção de essas contas;6) Executar uma verificação regular de discos locais com o antivírus noscomputadores e mídias removíveis;7) Para os itens que não estão equipados com protecção antivírus, use umaferramenta de limpeza de disco, como o Kaspersky Rescue Disk.

Para reparar a modificação dos arquivos e pastas em atalho, execute os seguintescomando no shell do Windows, dentro do drive atingido pela infecção, após serlimpo:

attrib -s -h -a /s /d *.*del /Q *.lnk

III. Procedimentos1. Na versão acima citada, o objeto usado para propagar a infecção é o

halak.vbs_crypted.vbs; isolando-o (transformando seu arquivo .vbs em .txt),encontrou-se o seguinte código:

'< -Safa7_22 Crypter- >Safa7_22 =deCrypt("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

TNwVWFrNHpaVVV4VldKRWFFOWxiWGMwVkRCU1YwOUZNVlZUV0dSdFVrZGplRnByVW1wTk1scEZXVE5zYlZKSFpEVmFhMUp1WlVkYVJWcDZSbTFTUlZZMVZGYzFNMDFyTlZsa2VrWk9UVE5qTUZScmFETk5NREZKWkhwU1RsZElaRFJVVmxKelQwVXhWVkZZWkcxU1IwNHpXbXRTV2sxdFdrVmFla0p0VWtkTmVscHJVbHBPUjFw

8/19/2019 Análise de Vírus

3/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

3

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

EphUlZKWWFFNVhTR042VkdwT00wMHdNVmxrZWxKT1ltNWplbFJVVGpOT1JURlpaRE5vVGxaRlNUUlVNVkpEVDBVNVZWRnFhRkJXUjJjMFZEQlNhMDlGTlZWYVJHaFBaVzEzTkZRd1VrZFBSVFZWVVdwb1QxWkZORFJVYm5CelQwVTVWV0ZFYUU5bGExazBWREJTUzA5Rk5YRmhSR2hRVWtWWk5GUldVa0pPVjFwRlZsUk9iVkpG

8/19/2019 Análise de Vírus

4/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

4

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

VNSMk41V210U1JtVkZNWFZrZWxKUVYwaGpNVlJxVGpOTk1ERjFaRE5vVGxKRlNUUlVNVkpEVDBVNVJWZHFhRTVXUld3MVdtdFNiazF0V2tWU1dHaFBVMGhqTUZScVRqTmxSVEZGWVVSb1VGWkhkelJVYTFKelQwVTFObHBFYUU1V1JVVXhXbXRTYW1ReVdrVmFlbFp0VWtka05scHJVa1psUlRGSlpIcFdUbE5JWkRSVVZWSlhU

8/19/2019 Análise de Vírus

5/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

5

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

00wMHdNVmxrTTJoT1ZrVnZORlJXVWtKTlYxcEZXbnBLYlZKR1JURmFhMUpxWkRKYVJWSllhRTVUU0dNd1ZHeG9NMDB3TVVsa2VrNVFVMGhqZVZScVRqTmxSVEZGVW1wb1RsWkZSVEZhYTFKcVRrZGFSVmt6YkcxU1JWWXpWRlpvTTAwd01YVmtla3BQWW01a05GUlZVbXRQUlRsRlVtcG9UMUpIWnpSVWJuQkRUMFV4VlZKVVVt

8/19/2019 Análise de Vírus

6/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

6

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

rVUZOSVkzcFVWelV6VGtVMVNXUXphRTVXUlVrMFZEQlNTMDlGT1ZWYVJHaFFVa1ZaTkZSclVtOVBSVFUyVVdwb1RsWkZWVEJhYTFKdVRVZGFSVnA2Um0xU1IwMHdXbXRTUm1WRk5VbGtlbEpQVTBoa05GUlZVbXRQUlRVMllVUm9UbFpGVlhsYWExSnVUVWRhUlZKWVpGQlhTR1EwVkZWU1UwOUZNVlZSVkVwdFVrZE5lbHByVWtaa01EbEpaSHBTVDJKdVpEUlVWbEpEVDBVNVJWUnFhRkJTUjFFMFZHdFNjMDlGT1VWYVJHaFBaVzFuTkZSdWNFTlBSVEZWVVZST2JWSkZWalZVVm1nelRrVTFkV1F6YUU1U1IzYzBWRlpTUm1WWFdrVlNXR1JQVFROak1GUnFUak5OTURGSlpIcE9UMU5JWkRSVVZsSlhUMFU1UlZScWFGQlNSMUUwVkRGU2MwOUZNVlZTVkZadFVrZGtObHByVWxKT1IxcEZVbGhrVUZOSVkzbFVNR2d6VGtVeFdXUjZVazlOTTJRMFZGVlNRMDlGTlRaVmFtaFFVa1ZaTkZSclVtOVBSVFUyVVdwb1RsWkZWak5hYTFKdVRsZGFSVlZVVW0xU1JWWXpWRlZvTTAwd01WbGtNMmhPVWtWWk5GUXdVbUZQUlRGVlVWUlNiVkpIWXpCYWExSnFUVEphUlZremFHMVNSVll6VkZWb00wNUZNVmxrZWxKUFYwaGpkMVF3YUROTk1EVkpaRE5vVGxaRk5EUlVNRkp6VDBVeFZWRlVVbTFTUlZZelZGVm9NMDVGTVhWa2VsWk9VMGhqZDFRd2FETmxSVEZWVjJwb1QyRnRkelJVTUZKTFQwVTVSV0ZFYUU5aGJHODBWRzF3YzA5Rk9VVldhbWhRVWtkUk5GUnNVbXRQUlRGVlVsaGtiVkpIWkRaYWExSnVUVmRhUlZsNlVtMVNSbXQ1V210U2NtUXlXa1ZWVkZKdFVrVldNMVF3YUROTmF6bEpaSHBTVGxkSVpEUlVWVkp6VDBVeFZWTllaRzFTUlZZelZEQm9NMDVGTVhWa2VrSlFWMGhqTVZSVmFETmxSVEZWVkdwb1VGWkZTVFJVYm5CRFQwVXhWVkZVUW0xU1IyUTJXbXRTY2s1SFdrVlhWRlp0VWtWV00xUXdhRE5OTURCNlpIcFNUbGRJWkRSVVZWSnpUMFV4VlZGVVFtMVNSVll6VkcwMU0wNVZPVWxrZWxKUFYwaGpNVlJWYUROTlJUbEpaSHBTVG1KdVkzcFVWV2d6VFRBeFNXUXphRTVXUjNjMFZERlNhMDlGTVZWUlZGSnRVa1ZXTTFRd2FETk9SVGxaWkhwU1QxTklaRFJV

VlZKelQwVXhWVk5ZWkcxU1IwMTNXbXRTYm1WSFdrVlZWRkp0VWtWV05GUldhRE5sUlRGeFVXcG9VRkpIZHpSVWExSnZUMFV4VlZGWVpHMVNSMlEyV210U2NrMHlXa1ZaTTJodFVrZGtOVnByVW1wbFYxcEZXbnBLYlZKSFkzcGFhMUpHWkRBNVNXUjZTbEJYU0dNd1ZHeG9NMDVGTkhwa2VrWlBUVE5rTkZSV1VrTlBSVGxGVkdwb1VGSkdXVFJVYm5CdlQwVTFjVmRxYUZCV1JVazBWR3RTYjA5Rk1WVlJWRkp0VWtack1GcHJVbTVsUjFwRlVsaG9UbE5JWkRSVVZWSkRUMFU1VlZGcWFGQlNSMUUwVkcxd2MwOUZNVlZTV0d4dFVrVldORlJXYUROT1JUbFpaRE5vVGxKSFp6UlVibkJ2VDBVMWNWZHFhRTlsYlhjMFZEQlNWMDlGTVZWUlZGSnRVa2RPTlZwclVtNU5SMXBGVWxob1RsTklZekJVVnpVelRsVTBlbVI2VWs1WFNHTjNWREJvTTAwd01VbGtNMmhPVmtkbk5GUXdVbE5QUlRsRlYycG9UMlZ0WnpSVVZsSkdUVWRhUlZwNlFtMVNSVll6VkdwT00wMHdPVWxrTTJoT1ZrVnZORlF3VWtkUFJUbEZXa1JvVGxaRlJqTmFhMUpxVFVkYVJWb3phRzFTUmtVd1dtdFNhbVF5V2tWU1dHaE9VMGhqTUZSVVRqTk9SVFZaWkhwV1VGZElZM2hVVkU0elpVVXhSVkZxYUZCU1JtODBWRlpTUm1WWFdrVmFlbEp0VWtkTk1WcHJVbTVPUjFwRlducEtiVkpIZEROYWExSnFUVEphUlZKWVpGQlRTR013VkcwMU0wMUZPVmxrZWxKUFRUTmpNRlJyYUROTk1EVkpaSHBHVG1KdVpEUlVWVkpEVDBVeFZWRlVWbTFTUjAxNldtdFNSbVZWTVZsa2VsSlBZbTVqTUZSc2FETk5WVEI2WkhwS1VGTklZekZVYWs0elRrVTFXV1I2VGs1VFNHUTBWRlpTUTA5Rk9VVlVhbWhRVWtaWk5GUnVjRzlQUlRWeFYycG9VRlpGU1RSVWExSnZUMFV4VlZGVVVtMVNSMDQyV210U2JrMUhXa1ZTV0dSUVYwaGtORlJYY0VOUFJURlZVVlJPYlZKSFpEUmFhMUpTVGtkYVJWbDZRbTFTUmxZeldtdFNiazVYV2tWU1dHUlFWMGhqZDFReGFETk9SVFI2WkROb1RsSkZTVFJVVmxKQ1RsZGFSVmw2

UW0xU1JWWTBWRzAxTTA1Rk5VbGtNMmhPVWtkM05GUldVa3BrTWxwRldYcENiVkpIWkRWYWExSmFUa2RhUlZkVVNtMVNSVlkwVkZWb00wNUZNSHBrZWxKUFYwaGtORlJWVWtOUFJUbFZXa1JvVUZaSGR6UlVibkJIVDBVMU5sVnFhRTlsYTI4MFZEQlNZVTlGTVZWU1dHUnRVa1ZXTkZSWE5UTmxSVEZGWVVSb1VGSkhVVFJVYlhCelQwVTFWVk5xYUU1V1JWVXhXbXRTYmsweVdrVlNXR1JRVTBoak1WUXhhRE5sUlRGeFVXcG9UbFpGUmpOYWExSkdaREE1U1dRemFFNVNSMmMwVkZaU1JrMXRXa1ZoZWxKdFVrWldORnByVW01TmJWcEZVbGhrVDFkSVkzcFVhazR6VFVVNVNXUjZUazlUU0dRMFZGWlNWMDlGT1VWaVJHaE9Wa1ZGTVZwclVsWmxiVnBGV2pOd2JWSkhjekJhYTFKcVpVZGFSVnA2U20xU1IwNDJXbXRTYmsxWFdrVlNXR1JRVjBoamQxUXhhRE5sUlRGRlZXcG9VRkpHYnpSVWJGSkhUMFV4VlZGVVFtMVNSVlkwVkd4b00wNUZNSHBrZWxKUFYwaGplbFF3YURObFJURlZVbXBvVUZaSGR6UlVibkJIVDBVMU5sVnFhRTVXUlZWNldtdFNiazFIV2tWU1dHUlBZbTVqZVZSdE5UTk9WVEZKWkhwU1QySnVZM2hVVm1nelpVVXhSVlZxYUU1V1JXdzFXbXRTYmsweVdrVlNXR1JQVFROa05GUlZVa05QUlRGVlVsUkdiVkpGVmpOVVZtZ3pUa1UxV1dRemFFNVNSMmMwVkcxd2IwOUZPVVZhUkdoUVVrZFJORlJXVWtKa01scEZVbGhrVDFOSVl6QlViVFV6WlVVeGNWTnFhRkJTUm04MFZHeFNVMDlGT1ZWUmFtaFBZVzEzTkZSV1VrSmtNbHBGV1ROb2JWSkhjekZhYTFKV1pESmFSVmw2UW0xU1IwNDFXbXRTYWs1SFdrVmFlazV0VWtWV00xUnJhRE5sUlRGRlZtcG9VRkpHYnpSVWExSnpUMFU1UlZkcWFFNVdSVll6V210U2JrMUhXa1ZYVkZadFVrZGtOVnByVW1wTlIxcEZZWHBXYlZKR1JUQmFhMUpHWkRBNVNXUjZUazVpYm1Nd1ZHcE9NMlZGTVVWaVJHaE9Wa1ZGZDFwclVrWmtNRFZaWkhwU1RrMHpZM2xVTVdnelRWVXdlbVF6YUU1V1JsazBWREJTVDA5Rk5VVmlSR2hQWVcxM05GUldVa1pPVjFwRldqTndiVkpHUlRCYWExSkdaREE1U1dSNlNsQlRTR013VkZab00wNUZOSHBrTTJoT1VrVkpORlJ1Y0ZOUFJUbEZVbXBvVDFKSFp6UlVibkJEVDBVeFZWSllaRzFTUjJNeFdtdFNSbVF3TlhWa2VrNU9UVE5qZDFReGFETk9WVGxKWkhwT1RsZElZM3BVVkU0elpVVXhjVkpxYUU5bGJXYzBWREJTYTA5Rk1WVlNXR3h0VWtkemVscHJVbTVOVjFwRlVsaHNUbUp1WXpCVWJHZ3paVVV4Y1ZOcWFGQlNSM2MwVkd4U1EwOUZOVVZpUkdoT1ZrVlZlRnByVW1wTk1scEZXVE5rYlZKRlZqUlVWelV6VGtVMVNXUjZVazVYU0dRMFZGWlNRMDlGTVZWUldHUnRVa2QwTTFwclVtNU5NbHBGVjFSV2JWSkZWalJVVnpVelpVVXhWVkpxYUZCU1IzYzBWRlpTUWs1SFdrVlhWRlp0VWtWV05GUXhhRE5PUlRCNlpIcENVRk5JWkRSVVZWSnZUMFUxY1dGRWFGQlNSVmswVkRCU2EwOUZNVlZSV0dSdFVrZE5kMXByVW01bFIxcEZWVlJTYlZKSFRqTmFhMUpHWlVVeFNXUjZVbEJYU0dRMFZGVlNZVTlGTlRaVWFtaFBVa2QzTkZReFVtOVBSVFUyVW1wb1QyVnJORFJVVmxKS1pVZGFSVmw2VW0xU1IyTjZXbXRTUm1WRk1YVmtlbFpQVFROak1GUnNhRE5sUlRGeFUycG9VRkpHYnpSVVZsSkdaVzFhUlZwNlZtMVNSVll6VkdwT00wNVZPVmxrZWtaT1RUTmtORlJWVWtkUFJURlZVVlJTYlZKRlZqUlVWelV6VGtVeGRXUjZUazlOTTJONVZERm9NMlZGTVZWWGFtaFBaV3hKTkZRd1VrZFBSVFZGWVVSb1QyVnJTVFJVVmxKR1pESmFSVm96Y0cxU1IyTjRXbXRTYWs1SFdrVlhWRXB0VWtkME0xcHJVbFprTWxwRldYcE9iVkpGVmpWVVZtZ3pUbFUwZW1SNlRrNVhTR1EwVkZkd1EwOUZNVlZSVkVadFVrZGtOVnByVWxabFIxcEZVbGhrVDFOSVkzaFVWV2d6VGtVMGVtUjZVazlOTTJOM1ZERm9NMlZGTVZWaFJHaE9Wa1ZHTTFwclVtNU5NbHBGV1hwU2JWSkZWalJVYWs0elRrVTFkV1F6YUU1V1JVazBWREJTWVU5Rk5UWlZhbWhRVWtWWk5GUnJVbTlQUlRGVlVsaG9iVkpGVmpWVVZ6VXpUa1U1V1dRemFFNWhhMjgwVkc1d1UwOUZOVFppU

kdoT1ZrVkdORnByVW01Tk1scEZXVE5rYlZKSFl6RmFhMUp1WlVkYVJWSllaRTlpYm1ONVZHMDFNMDB3Tkhwa2VsWlFVMGhqTUZSdE5UTk9SVGxaWkhwQ1VGTklZekJVYWs0elpVVXhSV0ZFYUU5bGJXYzBWRzF3WVU5Rk1WVlJXR1J0VWtWV00xUnFUak5sUlRGVllrUm9UbFpGVlRGYWExSnVaVzFhUlZwNlRtMVNSVll6VkZW

8/19/2019 Análise de Vírus

7/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

7

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

VnBFYUU5bGJXYzBWRlpTUmsxdFdrVmFla0p0VWtWV00xUXhhRE5sUlRGRlZXcG9UbFpGUlhsYWExSnFUVEphUlZKWVpGQlRTR013VkcwMU0yVkZNVlZSYW1oUVVrVTBORlF3VW10UFJUVlZWR3BvVDJWdGR6UlVNVkp2VDBVMU5sSnFhRTlsYkVrMFZGWlNSazF0V2tWYWVrWnRVa2RqZWxwclVrWmtNRGxKWkhwS1VGZElZekJVYkdnelRrVTBlbVI2Ums5Tk0yUTBWRlpTUTA5Rk9VVlVhbWhRVWtaWk5GUnVjRzlQUlRWeFYycG9VRlpGU1RSVWExSnZUMFV4VlZGVVVtMVNSbXN3V210U2JtVkhXa1ZTV0dSUVYwaGtORlJXVW1GUFJURlZVVlJHYlZKSFRYcGFhMUpXWkRKYVJWb3piRzFTUmtVeFdtdFNiazVYV2tWU1dHUlBUVE5qTVZReGFETk5WVEI2WkhwV1QwMHpZM3BVVldnelpVVXhWVk5xYUU5aGJXYzBWREJTUjA5Rk1WVlJWRlp0VWtWV05GUlhOVE5sUlRGRlZtcG9VRkpHYnpSVWExSnpUMFUxTmxGcWFFNVdSVll6V210U2JtVnRXa1ZWVkZKdFVrZGtOVnByVW1wa01scEZZWHBXYlZKR2F6RmFhMUpHWlZVeFNXUjZUazVpYm1Nd1ZHdG9NMlZGTVZWUmFtaFFVa1Z2TkZReFVtdFBSVGxGVW1wb1QxSkhaelJVYm5CRFQwVXhWVkpVVW0xU1IyTjNXbXRTYmsweVdrVlNXR1JRVTBoa05GUldVbE5QUlRsRlZXcG9UbFpGUlhwYWExSnFUa2RhUlZKWWFFOWlibU13Vkd0b00yVkZNVVZpUkdoT1ZrVkZkMXByVWtaa01EVjFaSHBPVDAwelpEUlVWVkp2VDBVNVJWZHFhRTVXUlZZeldtdFNibVZ0V2tWYWVrNXRVa1pXTmxwclVtcE9WMXBGWVhwV2JWSkhUalJhYTFKdVpWZGFSVmt6YkcxU1IyTjVXbXRTYms1SFdrVmFNMnh0VWtWV00xUnROVE5OTURSNlpETm9UbEpIWnpSVU1WSkRUMFUxUldKRWFGQlNSMUUwVkZaU1FrMHlXa1ZaZWxKdFVrZE5kMXByVW01TlIxcEZVbGhrVDAwelkzcFVNR2d6WlVVeFZWTnFhRkJTUlZrMFZEQlNhMDlGTVZWUldHUnRVa2ROZDFwclVtNWxSMXBGVlZSU2JWSkhUak5hYTFKR1pVVXhTV1I2VWs1Tk0yTXdW

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

lJxVGpObFJURkZXa1JvVGxaRlJYZGFhMUpxVFZkYVJXRjZWbTFTUjA0MFdtdFNibVZYV2tWU1dHaFBZbTVqTUZSdE5UTmxSVEZWVVdwb1RsWkZSVEJhYTFKcVRVZGFSVm96YUcxU1JrVXdXbXRTYW1ReVdrVlplbFp0VWtka05GcHJVbFprTWxwRlZWUldiVkpIVFRGYWExSnlUVEphUlZremFHMVNSMDE2V210U1JtVlZNVmxr

8/19/2019 Análise de Vírus

8/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

8

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

cGtla3BRVjBoa05GUldVa3RQUlRGVlVsaG9iVkpIWXpGYWExSkdaREE1U1dSNlRsQlRTR041VkcwMU0wMHdPVmxrZWxKUFYwaGtORlJWVW05UFJUVTJVMnBvVUZKR1NUUlVWbEpHWkRKYVJWb3piRzFTUjNONldtdFNibVZIV2tWVlZGSnRVa2RPTTFwclVrWmxSVGxKWkhwU1QxTklZekJVYlRVelRUQTVTV1F6YUU1V1JrazBWREJTVTA5Rk1WVlJWRTV0VWtkTk1GcHJVa1psUlRGMVpIcFNUbGRJWXpCVWFrNHpaVVV4UlZGcWFFOWxiRWswVkRCU1IwOUZOVVZoUkdoUFpXdEpORlJXVWtaa01scEZXak53YlZKSFkzaGFhMUpHWkRBMVNXUjZTazlOTTJRMFZGVlNRMDlGTVZWUlZGWnRVa2ROZWxwclVrWmxWVEYxWkhwU1QxZElZekJVYWs0elpVVXhSVkZxYUU5bGJFazBWREZTYjA5Rk9VVmFSR2hPVmtWc00xcHJVbFpOUjFwRlducENiVkpIVGpOYWExSkdaREF4U1dSNlRsQlhTR1EwVkZWU1EwOUZOVFpSYW1oT1ZrVldOVnByVWxwT1IxcEZXWHBPYlZKSFl6QmFhMUpHWlVVeGRXUXphRTVTUmtrMFZEQlNTMDlGTlVWaVJHaFFWa1ZKTkZSV1VrcGxWMXBGV25wV2JWSkZWak5VYWs0elRUQTVTV1I2VGs5VFNHTXhWREZvTTAxRk9WbGtNMmhPVWtkUk5GUldVa3BsUjFwRldYcE9iVkpIWTNwYWExSkdaVVUxZFdRemFFNVNSbTgwVkc1d2EwOUZNVlZSVkZadFVrVldNMVJyYURObFJURlZWbXBvVUZKSGR6UlVWbEpDVFRKYVJWSllaRTVUU0dONFZGWm9NMDVWTVVsa2VrSlFVMGhrTkZSV1VtRlBSVFUyVkdwb1VGSkZXVFJVVmxKQ1RsZGFSVkpZWkU5VFNHUTBWRlZTWVU5Rk9WVmhSR2hRVWtaWk5GUXhVa05QUlRWRllVUm9VRkpGTkRSVWExSnpUMFUxTm1GRWFFOWhiRzgwVkRGU1EwOUZOVVZoUkdoUVVrVnZORlF3VWt0UFJUbFZZa1JvVDJWcldUUlVWbEpHWlZkYVJXRXpaRzFTUjJONldtdFNXazVYV2tWV1dIQnRVa1ZXTkZSc2FETk9SVEI2WkhwU1QxZElZM3BVTUdnelRXczFkV1I2Vms5Tk0yTXdWRzAxTTJWRk1WVlRhbWhQWld0dk5GUXdVbUZQUlRGVlVsaGtiVkpIVFRCYWExSnlUVEphUlZwNlRtMVNSMDR6V210U2FrMUhXa1ZTV0doUFYwaGpNRlJVVGpOT1JUUjZaSHBXVUZkSVpEUlVWbEp6VDBVNVJWUnFhRTlTUjJjMFZGWlNRazVIV2tWWFZGSnRVa2RrTkZwclVtNU5NbHBGVWxoa1RsTklZM3BVYTJnelRrVXhXV1I2UWxCVFNHTjZWRlZvTTJWRk1WVlJhbWhRVWtkM05GUnJVbTlQUlRGVlVWaGtiVkpIVGpSYWExSkdaREF4V1dSNlVrOWlibVEwVkZWU2IwOUZPVVZoUkdoUFpXMVJORlJ1Y0VkUFJURlZVVmhrYlZKSFpEUmFhMUp1VFZkYVJWVlVVbTFTUjAxM1dtdFNSbVZGTUhwa2VsSlFWMGhrTkZSVlVtOVBSVEZWVVZoa2JWSkhaRFZhYTFKeVpESmFSVlZVVW0xU1JWWTBWRzAxTTAxck9WbGtlbEpPWW01ak1GUXdhRE5OYXpWMVpIcEtVRmRJWXpCVWJHZ3pUa1UwZW1SNlJrOU5NMlEwVkZaU1EwOUZPVVZVYW1oUVVrWlpORlJ1Y0c5UFJUVnhWMnBvVUZaRlNUUlVhMUp2VDBVeFZWRlVVbTFTUm1zd1dtdFNibVZIV2tWU1dHUlFWMGhrTkZSV1VtRlBSVGxWV2tSb1VGSkdielJVYkZKSFQwVXhWVkZVUW0xU1JWWTBWR3hvTTA1Vk1VbGtla3BRVjBoa05GUlZVa05QUlRsRldrUm9VRlpIWnpSVU1GSmhUMFV4VlZGVVVtMVNSMk13V210U2JrMHlXa1ZhZWs1dFVrVldNMVJWYUROTk1EVjFaSHBTVGswelkzbFVNV2d6VFRBMVNXUXphRTVXUlZrMFZEQlNjMDlGTlZWUmFtaFBVa2QzTkZSdWNFZFBSVEZWVVZoa2JWSkdhekZhYTFKR1pVVTFkV1I2VWs5VFNHTXdWRlpvTTA1Rk5WbGtla1pPVFROamVWUXdhRE5PVlRsSlpIcFNUMWRJWTNoVVZFNHpaVVV4VlZKcWFGQlNSM2MwVkZaU1NtVlhXa1ZaZWtKdFVrZGplVnByVW5Ka01scEZWVlJTYlZKRlZqTlVNR2d6VFdzNVNXUjZVazVOTTJRMFZGVlNjMDlGTVZWVFdHUnRVa1ZXTTFRd2FETk9SVEYxWkhwR1RsTklaRFJVVmxKelQwVXhWVkpVVm0xU1IyTjNXbXRTYW1ReVdrVlNXR1JQVTBoamVWUnFUak5sUlRGRlVtcG9VRkpIVVRSVWJuQlBUMFV4VlZOWWFHMVNSMk4zV210U1JtUXdPVmxrTTJoT1lXdEpORlJXVWtKTmJWc

EZXWHBPYlZKR1JUQmFhMUpTVGxkYVJWSllhRTVpYm1Nd1ZGYzFNMDB3TVVsa2VrNU9VMGhrTkZSV1VtOVBSVGxWVVdwb1QxSkhaelJVVmxKQ1RrZGFSVmRVVW0xU1IyUTBXbXRTYmsweVdrVlNXR1JPVTBoamVsUnJhRE5PUlRGWlpIcENVRk5JWTNwVWEyZ3pUVlV4V1dSNlVrOU5NMk13VkcwMU0yVkZNVVZWYW1oUFpXeFpO

8/19/2019 Análise de Vírus

9/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

9

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

VkzbFVNV2d6VGtVMVdXUjZVazlOTTJONFZHcE9NMDB3T1Zsa2VsSk9WMGhqZUZSVmFETk5SVGxaWkROb1RsWkdXVFJVTVZKdlQwVTVSVlpxYUU1V1JVVXdXbXRTV2s1SFdrVmFNMmh0VWtWV00xUXhhRE5sUlRGVlYycG9UbFpGUlhsYWExSnlUa2RhUlZwNlRtMVNSVlkwVkRGb00yVkZNWEZTYW1oUVVrZFJORlJXVWtKT1Ix

8/19/2019 Análise de Vírus

10/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

10

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

VWtkT05GcHJVa1psVlRGSlpETm9UbFpHYnpSVU1GSnpUMFU1UlZkcWFFNVdSVVl6V210U1ZtVlhXa1ZoZWxKdFVrWnJNVnByVWtaa01EbEpaSHBPVGswell6RlVWV2d6VFRBeGRXUXphRTVXUlc4MFZERlNRMDlGTlRaYVJHaFBVa2RuTkZSV1VrWmxWMXBGVWxob1VGZElZekJVTVdnelRVVTVTV1F6YUU1U1JrazBWREJTUzA5Rk1WVlJXR1J0VWtkamVscHJVbXBOTWxwRlVsaHNUbGRJWXpCVWEyZ3paVVV4VlZGcWFFNVdSVVV3V210U1JtUXdOVWxrZWxKUFRUTmplVlF4YUROTk1EQjZaRE5vVGxaSGR6UlVNRkpyVDBVeFZWRlVWbTFTUmxZMldtdFNiazB5V2tWaGVsWnRVa1pXTTFwclVtcE5SMXBGV1ROc2JWSkhUVEJhYTFKdVRUSmFSVkpZWkU5VFNHUTBWRlZTVjA5Rk9VVlhhbWhQVWtkM05GUXdVbUZQUlRGVlVsaGtiVkpIWTNkYWExSmFUbGRhUlZsNlVtMVNSbXQ2V210U2NrMHlXa1ZXV0dSdFVrZE5NRnByVWtabFJUVjFaSHBXVUZOSVkzbFVNR2d6VFRBMVNXUjZWazlOTTJNd1ZHeG9NMlZGTVhGVGFtaFFVa1p2TkZSc1VrZFBSVGxGV2tSb1VGSkdielJVVmxKQ1RVZGFSVm96Y0cxU1IzTXdXbXRTVWs1SFdrVlNXR1JRVTBoamVWUXdhRE5PUlRSNlpIcFNUMDB6WkRSVVZWSkRUMFUxTmxWcWFGQldSMmMwVkc1d1MwOUZNVlZSV0dSdFVrVldORlJYTlROT1JUQjZaSHBTVDFkSVkzcFVNR2d6VGxVeFNXUjZWazVUU0dONFZGVm9NMDB3TVVsa2VsSlFVMGhqZWxRd2FETk9SVGxKWkROb1RsWkZielJVVmxKQ1RUSmFSVm96YkcxU1JrVXdXbXRTY21ReVdrVlNXR3hPWW01ak1GUXhhRE5sUlRGRldrUm9VRlpIZHpSVWExSnpUMFU1VlZwRWFFOWxhMWswVkc1d1UwOUZPVVZoUkdoUVVrWnZORlF3VW05UFJUVTJZVVJvVGxaRlJYcGFhMUp1WlcxYVJWZFVWbTFTUlZZMFZGWm9NMlZGTVhGUmFtaFFVa2RSTkZSV1VrSk9SMXBGVjFSV2JWSkZWalJVTVdnelRrVXdlbVI2UWxCVFNHUTBWRlZTYjA5Rk5YRmhSR2hRVWtWWk5GUXdVbXRQ

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

GtVNVdXUjZVazlUU0dNd1ZHcE9NMlZGTVVWUmFtaFFVa1ZaTkZRd1VsZFBSVFZGWVVSb1QyVnJTVFJVYkZKUFQwVTVSVlJxYUU5V1JWazBWRlpTUm1WWFdrVmFNMnh0VWtkamQxcHJVa1prTURSNlpIcE9VRk5JWkRSVVZsSkxUMFU1UlZKcWFGQlNSMUUwVkZaU1FtUXlXa1ZaZWtKdFVrZGtORnByVWxKT1IxcEZXWHBDYlZK

8/19/2019 Análise de Vírus

11/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

11

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

zlpYm1RMFZGVlNWMDlGT1ZWaFJHaFFVa1paTkZReFVrTlBSVFZGWVVSb1VGSkhVVFJVVmxKQ1RrZGFSVmw2VW0xU1JWWTBWR3RvTTA1Vk1VbGtla0pRVjBoamVWUnROVE5OYXpsWlpIcE9VRk5JWTNwVVZtZ3paVVV4UlZGcWFFNVdSVVY2V210U2JrMXRXa1ZWVkZKdFVrWldObHByVWtabFJURlpaSHBTVUZkSVpEUlVWM0JM

8/19/2019 Análise de Vírus

12/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

12

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

NHpUVlV4U1dRemFFNVNSVWswVkcxd2MwOUZPVVZXYW1oUVVrZFJORlJzVW10UFJURlZVbGhrYlZKSFpEWmFhMUp1VFZkYVJWbDZVbTFTUm10NVdtdFNjbVF5V2tWVlZGSnRVa1ZXTTFRd2FETk5hemxKWkhwU1RsZElZekJVYWs0elpVVXhSVkZxYUU5bGJFazBWREJTUjA5Rk5VVmhSR2hQWld0Sk5GUldVa1prTWxwRldqTndiVkpIWTNoYWExSnFUa2RhUlZkVVNtMVNSM1F6V210U1VrNUhXa1ZTV0dSUVUwaGplVlF3YUROT1JURlpaSHBTVDAwelpEUlVWVkpEVDBVMU5sVnFhRkJTUlZrMFZHdFNiMDlGTlRaUmFtaE9Wa1ZXTTFwclVtNWxiVnBGV25wR2JWSkZWak5VVldnelRWVXhkV1F6YUU1U1JVazBWREJTYTA5Rk5YRmlSR2hPVmtWc05GcHJVbXBPVjFwRlducE9iVkpGVmpOVU1HZ3paVVV4UlZWcWFGQldSMUUwVkRCU1UwOUZPVVZXYW1oT1ZrVnNOVnByVW01T1YxcEZXbnBLYlZKSGN6RmFhMUpTVGxkYVJXRjZUbTFTUmxZeldtdFNhbVZ0V2tWU1dHeE9ZbTVqTVZSVmFETk5NREYxWkROb1RsWkZielJVVmxKQ1RUSmFSVm96Y0cxU1IwNDBXbXRTUm1WVk1VbGtNMmhPWVd0dk5GUXdVbXRQUlRGVlVWUlNiVkpIVFRCYWExSmFUVzFhUlZsNlZtMVNSMk40V210U1JtUXdPVWxrZWtwUVYwaGpNRlF4YUROTlJUbEpaSHBHVGswelkzbFVNR2d6VGxVMGVtUjZVazlYU0dONlZGVm9NMlZGTVZWUmFtaFFVa1UwTkZRd1VsZFBSVFUyWVVSb1QyRnNielJVTVZKRFQwVTFSV0ZFYUU1V1JVVXdXbXRTV2s1SFdrVmFNMmh0VWtkamVscHJVa1prTURGSlpIcE9UMU5JWXpCVVZtZ3pUVVU1U1dSNlRrNVRTR1EwVkZaU1EwOUZPVVZVYW1oUVVrWlpORlJ1Y0c5UFJUVnhWMnBvVUZaRlNUUlVhMUp2VDBVeFZWRlVVbTFTUm1zd1dtdFNibVZIV2tWYWVrNXRVa1ZXTTFSVmFETk5NRFZKWkhwU1RsZElZM2RVTUdnelRUQXhTV1F6YUU1V1JVazBWREJTYzA5Rk1WVlJWRTV0VWtkek1WcHJVbEpPVjFwRllYcFdiVkpGVmpOVU1XZ3pUVEF3ZW1RemFFNWhhMWswVkRCU1QwOUZNVlZTV0dSdFVrZE9NMXByVW1wTk1scEZZWHBTYlZKRlZqTlVNR2d6VFRBMVNXUXphRTVXUlZrMFZEQlNjMDlGTlZWUmFtaFBVa2QzTkZSV1VrSk5NbHBGWVhwU2JWSkhUalJhYTFKdVpWZGFSVmt6Y0cxU1IyUTBXbXRTUm1Rd09WbGtNMmhPVWtaSk5GUldVa0pOTWxwRldqTnNiVkpHVmpOYWExSkdaREF4U1dRemFFNVdSVWswVkRCU1YwOUZOVFpSYW1oUFpXMW5ORlJ0Y0dGUFJUbFZXa1JvVUZKR2J6UlVWbEpDVFRKYVJWSlliRTVYU0dONlZHcE9NMDVGTkhwa00yaE9Wa1p2TkZSdWNHdFBSVGxWWVVSb1VGSkdielJVTUZKelQwVTFSV0ZFYUZCU1IxRTBWRlpTUWs1SFdrVlplbEp0VWtkTmQxcHJVbTVOUjFwRlVsaGtUMDB6WTNwVU1HZ3paVVV4VlZOcWFGQlNSVmswVkRCU2EwOUZNVlZSV0dSdFVrZE5kMXByVW01bFIxcEZWVlJTYlZKSFRqTmFhMUpHWlVVeFNXUjZVazVOTTJNd1ZHeG9NMDB3T1Vsa2VrcFBZbTVqTVZSVmFETk5SVGxKWkROb1RsSkhaelJVYlhCdlQwVTVSVkpxYUZCU1IxRTBWRlpTUW1ReVdrVlpla0p0VWtka05GcHJVbEpPUjFwRldUTmtiVkpGVmpSVVZXZ3pUa1V3ZW1SNlVrOVhTR042VkRCb00wMXJOWFZrZWxaT1UwaGpkMVF3YURObFJURkZZVVJvVDJGdFp6UlVNRkpIVDBVNVJWcEVhRTVXUlVZeldtdFNSbVF3TlZsa2VsSk9ZbTVrTkZSWGNFdFBSVGxGVjJwb1RsWkZiRFJhYTFKdVRsZGFSVkpZWkU5aWJtTjZWR3RvTTAwd05WbGtlbFpRVjBoak1GUnNhRE5sUlRGeFVXcG9UbFpGVlhwYWExSnlaREphUlZremJHMVNSM1F6V210U1JtUXdOWFZrZWxaUVUwaGpNRlF3YUROT1JURjFaRE5vVGxaSGR6UlVNRkp6VDBVeFZWRlVWbTFTUmtVeFdtdFNSbVF3Tkhwa2VsWlBUVE5qZUZSVmFETk5NREZKWkhwU1VGZElZekJVVkU0elpVVXhSV0pFYUU1V1JXd3pXbXRTY21ReVdrVlplazV0VWtaRk1WcHJVbXBOUjFwRlZsaGtiVkpIWXpGYWExSldaREphUlZaWWNHMVNSVlkwVkd0b00wNVZNVWxrZWtKUVYwaGplVlJ0TlROT1JUVkpaSHBTVGxkSVl6QlVhazR6WlVVeFJXRkVhRTlsYkVrMFZER

lNRMDlGTVZWVFdHeHRVa1pyZVZwclVtcE5iVnBGV2pOd2JWSkhZM2hhYTFKcVRrZGFSVmRVU20xU1IzUXpXbXRTVWs1SFdrVlNXR1JRVTBoamVWUXdhRE5PUlRGWlpIcFNUMDB6WkRSVVZWSkRUMFUxTmxWcWFGQlNSVmswVkd0U2IwOUZOVFpSYW1oT1ZrVldNMXByVW01bGJWcEZXbnBHYlZKSFRUQmFhMUphVFcxYVJXRXpa

8/19/2019 Análise de Vírus

13/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

13

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

1dHaHRVa1ZXTTFScmFETmxSVEZWWWtSb1VGWkZTVFJVYlhCelQwVTFObUZFYUU1V1JWWTBXbXRTY2s1SFdrVmFlazV0VWtkT00xcHJVbTVPUjFwRlVsaGtUbGRJWTNwVVZtZ3paVVV4Y1ZGcWFFOWxiVkUwVkRGU2IwOUZPVVZWYW1oUVVrWnZORlJXVWtabFIxcEZXbnBXYlZKRlZqTlVNR2d6WlVVeFJWRnFhRkJTUm04MFZE

8/19/2019 Análise de Vírus

14/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

14

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

UZSV2FETk5WVEZKWkROb1RsSkhaelJVYlhCaFQwVTVWVkZxYUU5U1IyYzBWRlpTUWs1SFdrVlhWRkp0VWtka05GcHJVbTVOTWxwRlVsaGtUbE5JWTNwVWEyZ3pUa1V4V1dSNlFsQlRTR042VkZWb00yVkZNVlZSYW1oUVVrVTBORlF3VWxkUFJUVTJZVVJvVDJGc2J6UlVNVkpEVDBVMVJXRkVhRTVXUlVVd1dtdFNXazVIV2tW

8/19/2019 Análise de Vírus

15/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

15

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

XBGVWxob1RtSnVZM3BVTUdnelRrVTVTV1I2VGxCVFNHUTBWRlZTVjA5Rk9WVmhSR2hRVWtkbk5GUnVjRzlQUlRGVlVsaHNiVkpIWkRaYWExSlNUbGRhUlZsNlVtMVNSbXQ1V210U2JrMUhXa1ZTV0dSUFRUTmplbFF3YURObFJURlZVMnBvVUZKRldUUlVNRkpyVDBVeFZWRllaRzFTUjAxM1dtdFNibVZIV2tWVlZGSnRVa2RP

8/19/2019 Análise de Vírus

16/159

FMU - Tecnologia em Segurança da Informação - Prof. Alexsander Loula

16

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

rVXdXbXRTUm1Rd09VbGtla3BRVTBoak1GUldhRE5PUlRSNlpETm9UbEpGU1RSVWJuQlRUMFU1UlZKcWFFOVNSMmMwVkc1d1UwOUZNVlZUV0d4dFVrZGpNVnByVWtaa01EbFpaSHBDVUZkSVkzZFVNR2d6WlVVeFJWRnFhRTVXUlVVd1dtdFNSbVF3T1Vsa00yaE9Wa1p2TkZReFVtOVBSVFZWVW1wb1VGSkdielJVVmxKQ1RUSmFSVm96YkcxU1JrVXdXbXRTY21ReVdrVldXSEJ0VWtkamVscHJVa1prTURWMVpIcE9UMU5JWXpCVWFrNHpUVEEwZW1SNlRrNVhTR042VkRCb00wMHdNWFZrZWxKT1ltNWtORlJWVW1GUFJUVnhWMnBvVGxaRlJYZGFhMUp1WlVkYVJWVlVVbTFTUm1zeFdtdFNWbVZ0V2tWYU0zQnRVa2RqZUZwclVtcE9SMXBGV1hwR2JWSkhjM3BhYTFKR1pEQTVXV1I2VGs5VFNHTXdWREJvTTA1Rk5WbGtlbEpRVTBoak1GUnROVE5PVlRSNlpIcFNUMDB6WTNwVVZtZ3paVVV4UlZWcWFFNVdSVlY0V210U2JtVnRXa1ZhZWs1dFVrZHpNVnByVWtabFJUbFpaSHBTVGswelkzZFVNR2d6WlVVeFJXRkVhRTloYldjMFZEQlNSMDlGT1VWYVJHaE9Wa1ZHTTFwclVtcE5SMXBGV2pOb2JWSkdSVEJhYTFKcVpESmFSVkpZYUU1VFNHTXdWRlJPTTA1Rk5WbGtlazVRVTBoamVWUnFUak5PVlRsWlpIcEdUbE5JWTNwVWEyZ3paVVV4VlZkcWFFNVdSVVl6V210U2FtVlhXa1ZoTTJSdFVrZDBNMXByVW5KT1IxcEZXbnBPYlZKR1ZYcGFhMUpTVGxkYVJXRXpaRzFTUm1zd1dtdFNhbVZ0V2tWV1dIQnRVa1ZXTTFSV2FETk9SVFI2WkhwS1VGZElaRFJVVjNCSFQwVTVWV0ZFYUU5bGEyODBWREJTWVU5Rk9WVmFSR2hQWlcxUk5GUldVa0pPUjFwRldYcENiVkpGVmpSVU1XZ3pUa1U1V1dSNlJrNVRTR04zVkRGb00wNUZOSHBrZWxaUFRUTmtORlJWVW5OUFJUbEZ