Difference between revisions of "Comfoo"
Jump to navigation
Jump to search
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
{{Botnet | {{Botnet | ||
|UserAgent=Apache 2.0.50 (Unix) | |||
|CCProtocol=HTTP | |||
|Feature=Keylogger, System information gathering, Network information gathering, Screen capture, File upload, File download, File execute, Command shell, | |||
|Group=RAT | |||
|Fonctionnalités=* [[feature::System information gathering|System/network information gathering]] | |Fonctionnalités=* [[feature::System information gathering|System/network information gathering]] | ||
* [[feature::Keylogger]] | * [[feature::Keylogger]] | ||
| Line 10: | Line 14: | ||
* [[port::TCP/1689]] - admin relay for commands to victims/reports from victims | * [[port::TCP/1689]] - admin relay for commands to victims/reports from victims | ||
* [[port::TCP/80]], [[port::TCP/443]] - victim relay port | * [[port::TCP/80]], [[port::TCP/443]] - victim relay port | ||
|Victime4= | |Victime4= | ||
}} | }} | ||
Latest revision as of 13:55, 8 August 2015
(Botnet) Link to the old Wiki page : [1] / Google search: [2]
| Comfoo | |
|---|---|
| Alias | |
| Group | RAT |
| Parent | |
| Sibling | |
| Family | |
| Relations | Variants: Sibling of: Luckycat |
| Target | |
| Origin | |
| Distribution vector | |
| UserAgent | Apache 2.0.50 (Unix) |
| CCProtocol | HTTP (Centralized) |
| Activity | / |
| Status | |
| Language | |
| Programming language | |
| Operation/Working group | |
Introduction
Features
Associated images
Checksums / AV databases
Publications
| Author | Editor | Year | |
|---|---|---|---|
| Secrets of the Comfoo masters | Joe Stewart Don Jackson | DELL SecureWorks | 2013 |