Eric.freyssinet: Text replacement - "=Unknown" to "="

2015-08-08T13:49:13Z

Text replacement - "=Unknown" to "="

← Older revision		Revision as of 13:49, 8 August 2015
Line 52:		Line 52:
	\|UserAgent2=Opera/9.80 (Windows NT 5.1; U; Edition Yx; ru) Presto/2.9.168 Version/11.52 01/12/12		\|UserAgent2=Opera/9.80 (Windows NT 5.1; U; Edition Yx; ru) Presto/2.9.168 Version/11.52 01/12/12
	\|UserAgent3=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 31/01/13		\|UserAgent3=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 31/01/13
	\|CCProtocol=~~Unknown~~		\|CCProtocol=
	\|Target=~~Unknown~~		\|Target=
	\|Status=~~Unknown~~		\|Status=
	\|BeginYear=2012		\|BeginYear=2012
	\|EndYear=~~Unknown~~		\|EndYear=
	\|Group=Police lock		\|Group=Police lock
	\|Groupe2=Family		\|Groupe2=Family

Eric.freyssinet: 1 revision imported

2015-02-04T22:07:22Z

1 revision imported

← Older revision		Revision as of 22:07, 4 February 2015
(No difference)

Eric.freyssinet at 20:48, 28 July 2013

2013-07-28T20:48:04Z

New page

{{Botnet
|Introduction=* Will show the victim's antivirus logo in July 2013 versions
|Fonctionnalités=some md5:

e488b3d173fd97661ded846b6e72705f
b88fd69b53a6e4587d9e95a0c6061141
67b93aa858477cbfc878c85df8bf6e43
ac42b22e30dd556eae6d36c7c1240a71
99f31640347259d3d2b18105e493989e
b5cdc60ec5dfee61a9567e69ea7b59df
2814562a614f6d3fe9b22d2329b016dc 06/09/12
58c5971869a315f12f319232d1f84f87 15/09/12
54a3874120c84aa0d1e9ddcd8e60052f 22/09/12
b98af65946f3025709e7283370c67d9d 31/01/13

same http GET :

<nowiki>http://urain.ru/555657555ADE6AF62AFABE605A44B9514F9EB537DD0E570A1C1B</nowiki>
<nowiki>http://taabj.ru/555657555ADE6AF62AFABE605A44B9514F9EB537DD0E570A1C1B</nowiki>
<nowiki>http://qdsdq.ru/55565756EAD196EA4ED4FB58D3752933E82F33D274C36C366C47</nowiki>
<nowiki>http://hwtrd.ru/55565756EAD196EA4ED4FB58D3752933E82F33D274C36C366C47</nowiki>
<nowiki>http://fsbps.ru/555657550DDA6AF626ADE961594CEC0C499BB236DD0F540A1C1B</nowiki> 04/09/12
<nowiki>http://qatvy.ru/555657550DDA6AF626ADE961594CEC0C499BB236DD0F540A1C1B</nowiki> 15/09/12
<nowiki>http://qcdln.ru/5556575557D83AF823FBBE655C17ED0D1FC6E234DD0E570A1C1B</nowiki> 23/09/12
<nowiki>http://ljdrj.ru/forums/crkgoxpydrrc-zrxqcemsplwkgl-rtjt-ygpafqhcbfeyrkbqrcybdd-xold_tmvylt-gafpplsynwfa-pmmvtyvkrc.html</nowiki> 01/12/12
<nowiki>http://yuptc.com/os_ososos-osos-osos-ontu-wkdunoqpohlz-gjeytu-sney-fydn-rigj-susy-sdsi-clyb-awfzaknaksjk-rzbq-cudh-cl.php
</nowiki> 31/01/13
<nowiki>http://gpbxn.ru/ti_sddn_xocqpiqjteezbl_pznb-akcn-bfuq_pivrwi-frvp-goejcljwblgamv_zjko_xvddfv-vrat-xftudhgknhifkg.php</nowiki>09/02/13
|Illustrations={{#ask: [[threat::Urausy]][[month::2013-07]]
|format=gallery|perrow=4|widths=300|heights=300}}

{{#ask: [[threat::Urausy]][[month::2013-04]]
|format=gallery|perrow=4|widths=300|heights=300}}

{{#ask: [[threat::Urausy]][[month::2013-03]]
|format=gallery|perrow=4|widths=300|heights=300}}

{{#ask: [[threat::Urausy]][[month::2013-02]]
|format=gallery|perrow=4|widths=300|heights=300}}

{{#ask: [[threat::Urausy]][[month::2012-10]]
|format=gallery|perrow=4|widths=300|heights=300}}

{{#ask: [[threat::Urausy]][[month::2012-09]]
|format=gallery|perrow=4|widths=300|heights=300}}

{{#ask: [[threat::Urausy]][[month::2012-08]]
|format=gallery|perrow=4|widths=300|heights=300}}
|Infrastructure=* Could be distributed through [[distributed on::Sibhost]]
|UserAgent=Our_Agent
|UserAgent2=Opera/9.80 (Windows NT 5.1; U; Edition Yx; ru) Presto/2.9.168 Version/11.52 01/12/12
|UserAgent3=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 31/01/13
|CCProtocol=Unknown
|Target=Unknown
|Status=Unknown
|BeginYear=2012
|EndYear=Unknown
|Group=Police lock
|Groupe2=Family
|Vector=Sibhost
|Victime4=
}}

Urausy - Revision history

Eric.freyssinet: Text replacement - "=Unknown" to "="

Eric.freyssinet: 1 revision imported

Eric.freyssinet at 20:48, 28 July 2013