Difference between revisions of "Andromeda"
Jump to navigation
Jump to search
m (Text replacement - "=Unknown" to "=") |
|||
Line 14: | Line 14: | ||
|Feature=File download, | |Feature=File download, | ||
|BeginYear=2011-09 | |BeginYear=2011-09 | ||
|EndYear= | |EndYear= | ||
|Group=Banking | |Group=Banking | ||
|Fonctionnalités=* Anti-VM/Anti-Debugging | |Fonctionnalités=* Anti-VM/Anti-Debugging | ||
Line 30: | Line 30: | ||
* Keylogger : 200$ | * Keylogger : 200$ | ||
* Ring3 Rootkit : 300$ | * Ring3 Rootkit : 300$ | ||
|Etat= | |Etat= | ||
|Alias1=Gamarue | |Alias1=Gamarue | ||
|Vendor1=Microsoft | |Vendor1=Microsoft | ||
|Victime4= | |Victime4= | ||
}} | }} |
Revision as of 15:44, 8 August 2015
(Botnet) Link to the old Wiki page : [1] / Google search: [2]
Andromeda | |
---|---|
Alias | Gamarue |
Group | Banking |
Parent | |
Sibling | |
Family | |
Relations | Variants: Sibling of: |
Target | Microsoft Windows |
Origin | |
Distribution vector | Smoke Bot |
UserAgent | Mozilla/4.0 |
CCProtocol | HTTP (Centralized) |
Activity | 2011-09 / |
Status | |
Language | |
Programming language | |
Operation/Working group |
Introduction
Andromeda est un botnet basé sur HTTP qui inclus
Plugins :
- Keyloggers
- Form grabbers
- SOCKS4 proxy module
- Rootkits
Features