First post for Adra analysis (Score 2)

It seems that it is the first post for adrd analysis from aegislab blog: http://blog.aegislab.com/index.php?op=ViewArticle&articleId=75&blogId=1 adrd schedules an alarm to wake itself up when firstly deployed. It acts less frequently than other trojans like GEINIMI found in China, and thus harder to trace once launched. All transmissions are encrypted by DES, but can be easily decode by using key found in DEX file.