psuedoelastic / POSHSPY

POSHSPY backdoor code

POSHSPY

Redcated APT29 POSHSPY backdoor sample

Referenced in my blog post here: https://www.fireeye.com/blog/threat-research/2017/03/dissecting_one_ofap.html