Difference between revisions of "Tales from Crisis, Chapter 1: The dropper’s box of tricks"

From Botnets.fr
Jump to navigation Jump to search
m (1 revision imported)
m (Text replacement - " août " to " aug")
 
Line 3: Line 3:
|Author=osxreverser
|Author=osxreverser
|NomRevue=Reverse Engineering Mac OS X
|NomRevue=Reverse Engineering Mac OS X
|Date=6 août 2012
|Date=6 aug2012
|Editor=osxreverser
|Editor=osxreverser
|Year=2012
|Year=2012

Latest revision as of 21:31, 5 August 2015

(Publication) Google search: [1]

Tales from Crisis, Chapter 1: The dropper’s box of tricks
Botnet Crisis
Malware
Botnet/malware group
Exploit kits
Services
Feature
Distribution vector
Target
Origin
Campaign
Operation/Working group
Vulnerability
CCProtocol
Date 2012 / 6 aug2012
Editor/Conference osxreverser
Link http://reverse.put.as/2012/08/06/tales-from-crisis-chapter-1-the-droppers-box-of-tricks/ reverse.put.as (reverse.put.as Archive copy)
Author osxreverser
Type

Abstract

Crisis has a dropper application that is responsible for installing the backdoors, spy modules and rootkit. It’s a x86 Mach-O binary, with SHA256 checksum of 10fa7fa952dfc933b96d92ccd254a7655840250a787a1b4d9889bf2f70153791.

Bibtex

 @misc{Lua error: Cannot create process: proc_open(/dev/null): failed to open stream: Operation not permitted2012BFR1125,
   editor = {osxreverser},
   author = {osxreverser},
   title = {Tales from Crisis, Chapter 1: The dropper’s box of tricks},
   date = {06},
   month = Aug,
   year = {2012},
   howpublished = {\url{http://reverse.put.as/2012/08/06/tales-from-crisis-chapter-1-the-droppers-box-of-tricks/ reverse.put.as}},
 }