Difference between revisions of "Adneukine"

From Botnets.fr
Jump to navigation Jump to search
 
Line 1: Line 1:
{{Botnet}}
{{Botnet
|Introduction=Actually it is the name temporarily given to a version of [[variant of::Lyposit]]
md5:
  e2569d952c0c48976c20758fd13e6155 26/11/12
  6d4dd63d0290b83c1f8cbd40b368b349 27/11/12
  c33987e0a9043f33dae133d2586b0253 27/11/12
 
http GET:
  <nowiki>neufbem9jefnike.com GET /ad/?ck=HKkvABgRAEQySDEAAQAAALzI7bHIseKB</nowiki>  37.143.12.145 -- 26/11/12
  <nowiki>kiribati91.org GET /ad/?sshe=HtwZABgRAEQxSDIAIQAAANEmVlTBNTAs </nowiki> 37.143.12.145 -- 27/11/12
|Vector=ProPack,
|BeginYear=2012
|Group=Ransomware, Police lock,
}}

Latest revision as of 15:20, 31 January 2015

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Adneukine
Alias
Group Ransomware, Police lock
Parent
Sibling
Family
Relations Variants:

Sibling of:
Parent of:
Distribution of:
Campaigns:

Target
Origin
Distribution vector ProPack
UserAgent
CCProtocol
Activity 2012 /
Status
Language
Programming language
Operation/Working group

Introduction

Actually it is the name temporarily given to a version of Lyposit md5:

 e2569d952c0c48976c20758fd13e6155 26/11/12
 6d4dd63d0290b83c1f8cbd40b368b349 27/11/12
 c33987e0a9043f33dae133d2586b0253 27/11/12

http GET:

  neufbem9jefnike.com GET /ad/?ck=HKkvABgRAEQySDEAAQAAALzI7bHIseKB  37.143.12.145 -- 26/11/12		
  kiribati91.org GET /ad/?sshe=HtwZABgRAEQxSDIAIQAAANEmVlTBNTAs  37.143.12.145 -- 27/11/12

Features

Associated images

Checksums / AV databases

Publications