Beebone

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Beebone
Alias	Symmi, Changeup, Vobfus
Group	Downloading
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Hiloti, Ramdo Campaigns:
Target
Origin
Distribution vector
UserAgent
CCProtocol	TCP (Port), HTTP (Centralized)
Activity	/ 2015
Status	inactive
Language
Programming language
Operation/Working group

Features

• File download

• Domain generation algorithm

Publications

	Author	Editor	Year
Buh-bye Beebone! Law enforcement kills polymorphic virus-spreading botnet	John Zorabedian	Sophos	2015
Large-scale analysis of malware downloaders	Christian Rossow Christian Dietrich Herbert Bosz	DIMVA	2012
MSRT April 2014 – Ramdo	Shawn Wang	Microsoft	2014
The DGA of Symmi	Johannes Bader	Johannes Bader	2015
W32.Changeup: how the worm was created	Masaki Suenaga	Symantec	2012
Zeroing in on malware propagation methods	Joe Faulhaber David Felstead Paul Henry Jeff Jones Ellen Cram Kowalczyk Jimmy Kuo John Lambert Marc Lauricella Aaron Margosis Michelle Meyer Anurag Pandit Anthony Penta Dave Probert Tim Rains Mark E. Russinovich Weijuan Shi Adam Shostack Frank Simorjay Hemanth Srinivasan Holly Stewart Matt Thomlinson Jeff Williams Scott Wu Terry Zink	Microsoft	2011