Phishing email Malicious emails sent from actors IEEE Aerospace Conference 2014 invite@aeroconf2014.org FireEye 2014-05-15T00:00:00 Malware control server Malicious domains ond IP wned by actors yahoomail.com.co 81.17.28.227 FireEye 2013-11-28T00:00:00 Malware used by actors Remote access trojan "Stealer" IntelRS.exe C:\Documents and Settings{USER}\Application Data\IntelRapidStart\AppTransferWiz.dll .exe MD5 6dc7cc33a3cdcfee6c4edb6c085b869d 81.17.28.227 Related_To FireEye 2014-05-15T00:00:00 Phishing Attempt Emails sent to targets Theft - Credential Theft Malware Implant Customized trojan written in .NET Account Takeover Ajax Team Iranian intrusion team Political Military Practitioner Advantage - Political Medium FireEye Ajax/Saffron report Threat Report Indicators and background on a computer intrusion 2014-05-15T00:00:00