Waledac

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Waledac
Alias	Kelihos, Waled, SLM
Group	Spamming
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target	Microsoft Windows
Origin
Distribution vector
UserAgent	Unknown
CCProtocol	4 tier P2P (Decentralized)
Activity	2009 / Unknown
Status	Unknown
Language
Programming language
Operation/Working group	Operation b49

Features

• AES encryption

• Send spam

• DDoS

• Fast flux

• Base64 encoding

Publications

	Author	Editor	Year
A quick update on spambot Kelihos		Abuse.ch	2012
An overview of messaging botnets	François Paget	McAfee	2013
Attackers place Command and Control servers inside enterprise walls	Brian Prince	Security Week	2012
Bot herders build newer versions of previous botnet Waledac		SPAMfighter	2013
Cracking down on botnets	Tim Cranton	Microsoft	2010
Detection and classification of different botnet C&C channels	Gregory Fedynyshyn Mooi Choo Chuah Gang Tan	Lehigh University. Bethlehem	2009
Kelihos back in town using Fast Flux		Abuse.ch	2012
Kelihos: not alien resurrection, more attack of the clones	David Harley	ESET	2012
SIRv12	Joe Faulhaber David Felstead Paul Henry Jeff Jones Jimmy Kuo Marc Lauricella Dave Probert Tim Rains Frank Simorjay Holly Stewart Matt Thomlinson Scott Wu Terry Zink Dennis Batchelder Shah Bawany Joe Blackbird Eve Blakemore Sarmad Fayyaz Nitin Kumar Goel Ken Malcolmson Nam Ng Mark Oram Daryl Pecelj	Microsoft	2012
Spambot evolution 2011	SecureWorks' Counter Threat Unit	DELL SecureWorks	2011
The Waledac protocol: the how and why	Chris Nunnery Brent ByungHoon Kang Greg Sinclair	Malicious and Unwanted Software (MALWARE)	2009
The case for in-the-lab botnet experimentation: creating and taking down a 3000-node botnet	Joan Calvet Carlton R. Davis José M. Fernandez Jean-Yves Marion Pier-Luc St-Onge Wadie Guizani Pierre-Marc Bureau Anil Somayaji	Annual Computer Security Applications Conference	2010
Virut malware fuels Waledac botnet resurgence	Danielle Walker	Haymarket Media, Inc	2013
Waledac Botnet - Deployment and Communication Analysis	Kyle Yang Derek Manky	Fortinet	2009
Waledac gets cozy with Virut	Denis Carmody	Symantec	2013
ZeuSbot/Spyeye P2P updated, fortifying the botnet	Andrea Lelli	Symantec	2012