Difference between revisions of "Kraken"

From Botnets.fr
Jump to navigation Jump to search
 
(4 intermediate revisions by the same user not shown)
Line 1: Line 1:
{{Botnet
{{Botnet
|Introduction=Ce botnet, particulièrement actif en 2008 (de 100 000 à 400 000 zombies estimés en avril de cette année), est connu pour une activité d'envoi de courriels non sollicités que l'on estimait à 9 milliards par jours.
|Alias=Oderoor
|Target=Microsoft Windows,
|Parent=Bobax
|UserAgent=Unknown
|CCProtocol=UDP/447, TCP/447, Custom protocol with DGA,
|CCProtocol=HTTP,
|Feature=Domain generation algorithm,
|Status=Unknown
|BeginYear=2008
|BeginYear=2008
|EndYear=Unknown
|Group=Spamming,
|Fonctionnalités=* Recherche de C&C à travers un protocole chiffré
* Envoi de courriels non sollicités
|Commandes=
|Infrastructure=
|Commercialisation=
|Victime1=
|Victime2=
|Victime3=
|Victime4=
|Vendor1=Microsoft Malware Protection Centre
|Vendor2=
|Vendor3=
|Vendor4=
|Vendor5=
|Vendor6=
|Vendor7=
|Vendor8=
|Vendor9=
|Vendor10=
}}
}}

Latest revision as of 01:18, 3 August 2015

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Kraken
Alias Oderoor
Group
Parent Bobax
Sibling
Family
Relations Variants:

Sibling of:
Parent of:
Distribution of:
Campaigns:

Target
Origin
Distribution vector
UserAgent
CCProtocol UDP/447 (Port), TCP/447 (Port), Custom protocol with DGA (Distributed-centralized)
Activity 2008 /
Status
Language
Programming language
Operation/Working group

Introduction

Features


Associated images

Checksums / AV databases

Publications

 AuthorEditorYear
An overview of messaging botnetsFrançois PagetMcAfee2013
Encyclopedia entry: Win32/OderoorMatt McCormackMicrosoft Malware Protection Centre2008
Kraken botnet infiltrationPedram AminiTipping Point2008
Owning Kraken zombiesCody PierceTipping Point2008