https://www.botnets.fr/index.php?action=history&feed=atom&title=Citadel_%3A_le_fichier_de_configuration 2026-10-24T00:46:39Z Revision history for this page on the wiki MediaWiki 1.43.11 https://www.botnets.fr/index.php?title=Citadel_:_le_fichier_de_configuration&diff=5881&oldid=prev 2015-08-05T20:53:19Z

<p>Text replacement - &quot; cert.lexsi.com&quot; to &quot;&quot;</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 20:53, 5 August 2015</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Publication</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Publication</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Image=citadel_le_fichier_de_configuration.png</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Image=citadel_le_fichier_de_configuration.png</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|Link=http://cert.lexsi.com/weblog/index.php/2012/03/12/426-citadel-le-fichier-de-configuration <del style="font-weight: bold; text-decoration: none;">cert.lexsi.com</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|Link=http://cert.lexsi.com/weblog/index.php/2012/03/12/426-citadel-le-fichier-de-configuration</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Author=Fabien Perigaud</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Author=Fabien Perigaud</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|NomRevue=Weblog CERT-LEXSI</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|NomRevue=Weblog CERT-LEXSI</div></td></tr> <!-- diff cache key wiki:diff:1.41:old-2073:rev-5881:php=table --> </table>

Eric.freyssinet https://www.botnets.fr/index.php?title=Citadel_:_le_fichier_de_configuration&diff=2073&oldid=prev 2015-02-07T14:23:47Z

<p>1 revision imported</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 14:23, 7 February 2015</td> </tr><tr><td colspan="4" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div> </td></tr> <!-- diff cache key wiki:diff:1.41:old-2072:rev-2073 --> </table>

Eric.freyssinet https://www.botnets.fr/index.php?title=Citadel_:_le_fichier_de_configuration&diff=2072&oldid=prev 2012-10-20T09:12:12Z

<p>Remplacement du texte — « Zeus » par « ZeuS »</p> <p><b>New page</b></p><div>{{Publication<br /> |Image=citadel_le_fichier_de_configuration.png<br /> |Link=http://cert.lexsi.com/weblog/index.php/2012/03/12/426-citadel-le-fichier-de-configuration cert.lexsi.com<br /> |Author=Fabien Perigaud<br /> |NomRevue=Weblog CERT-LEXSI<br /> |Date=lundi 12 mars 2012<br /> |Editor=LEXSI<br /> |Year=2012<br /> |Botnet=Citadel<br /> |Abstract=Nous nous sommes récemment intéressés au dernier venu dans le monde des malwares bancaires : Citadel. La publication du code source du malware ZeuS a rendu possible la création de nouveaux malwares bancaires, et Citadel fait partie de ceux-ci. L&#039;une de ses particularités est la possibilité pour les clients (au sens commercial du terme) de demander et/ou proposer l&#039;implémentation de nouvelles fonctionnalités, afin que le malware soit le plus proche possible de leurs attentes.<br /> <br /> Ce billet présente les étapes effectuées afin de pouvoir déchiffrer le fichier de configuration d&#039;une souche spécifique, qui contient l&#039;ensemble des cibles, injections et autres paramètres du malware.<br /> }}</div>

Eric.freyssinet