Difference between revisions of "Tales from Crisis, Chapter 1: The dropper’s box of tricks"
Jump to navigation
Jump to search
m (1 revision imported) |
m (Text replacement - " août " to " aug") |
||
Line 3: | Line 3: | ||
|Author=osxreverser | |Author=osxreverser | ||
|NomRevue=Reverse Engineering Mac OS X | |NomRevue=Reverse Engineering Mac OS X | ||
|Date=6 | |Date=6 aug2012 | ||
|Editor=osxreverser | |Editor=osxreverser | ||
|Year=2012 | |Year=2012 |
Latest revision as of 21:31, 5 August 2015
(Publication) Google search: [1]
Tales from Crisis, Chapter 1: The dropper’s box of tricks | |
---|---|
Botnet | Crisis |
Malware | |
Botnet/malware group | |
Exploit kits | |
Services | |
Feature | |
Distribution vector | |
Target | |
Origin | |
Campaign | |
Operation/Working group | |
Vulnerability | |
CCProtocol | |
Date | 2012 / 6 aug2012 |
Editor/Conference | osxreverser |
Link | http://reverse.put.as/2012/08/06/tales-from-crisis-chapter-1-the-droppers-box-of-tricks/ reverse.put.as (reverse.put.as Archive copy) |
Author | osxreverser |
Type |
Abstract
“ Crisis has a dropper application that is responsible for installing the backdoors, spy modules and rootkit. It’s a x86 Mach-O binary, with SHA256 checksum of 10fa7fa952dfc933b96d92ccd254a7655840250a787a1b4d9889bf2f70153791.
Bibtex
@misc{Lua error: Cannot create process: proc_open(/dev/null): failed to open stream: Operation not permitted2012BFR1125, editor = {osxreverser}, author = {osxreverser}, title = {Tales from Crisis, Chapter 1: The dropper’s box of tricks}, date = {06}, month = Aug, year = {2012}, howpublished = {\url{http://reverse.put.as/2012/08/06/tales-from-crisis-chapter-1-the-droppers-box-of-tricks/ reverse.put.as}}, }