View source for Reversing Andromeda-Gamarue botnet

{{Publication
|Type=Blogpost
|Link=http://www.garage4hackers.com/content/154-reversing-andromeda-gamarue-botnet.html www.garage4hackers.com
|Author=Rashid Bhatt
|NomRevue=Garage 4 Hackers
|Date=2013-06-07
|Editor=Garage 4 Hackers
|Year=2013
|Botnet=Andromeda, Gamarue
|Abstract=There has been recent waves of this botnet in wild , known as Andromeda-Gamarue . This botnet is modular, flexible and c2c internet controlled botnet. I Recently spent some time analysing this piece of dangerous botnet . This blog will explore the insights of this botnet and how malware's keep changing their structure in order to evade automatic analysis systems and to frustrate the malware analysts
TrendMicro notified about the rise of Gamarue botnet (https://blog.trendmicro.com/trendlab...romeda-botnet/) .

This one is a Modular botnet , which means its supports a plug-in interface system and can be extended. Apart from that , the main build sample provides some default features like, update bot, download and execute functionality. This Botnet also includes some interesting evasion techniques which i will be discussing later.
}}