Targeted destructive malware explained: Troj/Mdrop-ELD

(Publication) Google search: [1]

Targeted destructive malware explained: Troj/Mdrop-ELD
Botnet	MDrop-ELD, DistTrack
Malware
Botnet/malware group
Exploit kits
Services
Feature
Distribution vector
Target
Origin
Campaign
Operation/Working group
Vulnerability
CCProtocol
Date	2012 / 17 août 2012
Editor/Conference	Sophos Labs
Link	http://nakedsecurity.sophos.com/2012/08/17/targeted-destructive-malware-explained-trojmdrop-eld/ nakedsecurity.sophos.com (nakedsecurity.sophos.com Archive copy)
Author	Paul Baccas
Type

Abstract

“ I was confident it was malicious. And, because no other security lab seemed to detect the file, I picked a name, Troj/MDrop-ELD, wrote a quick detection, and went home.

The next day, we saw a flurry of queries about a "new" piece of malware 'Disttrack'. It turned out that it was the same piece of malware that I had detected the previous night. So one of my colleagues did some more detailed analysis.

Bibtex

 @misc{2012BFR1098,
   editor = {Sophos Labs},
   author = {Paul Baccas},
   title = {Targeted destructive malware explained: Troj/Mdrop-ELD},
   date = {},
   month = ,
   year = {2012},
   howpublished = {\url{http://nakedsecurity.sophos.com/2012/08/17/targeted-destructive-malware-explained-trojmdrop-eld/ nakedsecurity.sophos.com}},
 }