Difference between revisions of "Uremtoo"
Jump to navigation
Jump to search
m (Text replacement - "Unknown, , , " to "") |
m (Text replacement - "=Unknown" to "=") |
||
(One intermediate revision by the same user not shown) | |||
Line 18: | Line 18: | ||
| UserAgent=Opera/9.80 (Windows NT 5.1; U; Edition Yx; en) Presto/2.9.168 Version/11.52 | | UserAgent=Opera/9.80 (Windows NT 5.1; U; Edition Yx; en) Presto/2.9.168 Version/11.52 | ||
| Group=Police lock | | Group=Police lock | ||
| CCProtocol= | | CCProtocol= , | ||
| Target= | | Target= | ||
| BeginYear= | | BeginYear= | ||
| EndYear= | | EndYear= | ||
| Status= | | Status= | ||
| Vector=Phoenix, , , , | | Vector=Phoenix, , , , | ||
| Victime1= | | Victime1= |
Latest revision as of 14:44, 8 August 2015
(Botnet) Link to the old Wiki page : [1] / Google search: [2]
Uremtoo | |
---|---|
Alias | |
Group | Police lock |
Parent | |
Sibling | |
Family | |
Relations | Variants: Sibling of: |
Target | |
Origin | |
Distribution vector | Phoenix |
UserAgent | Opera/9.80 (Windows NT 5.1; U; Edition Yx; en) Presto/2.9.168 Version/11.52 |
CCProtocol | |
Activity | / |
Status | |
Language | |
Programming language | |
Operation/Working group |
Introduction
It's a variant of Urausy
md5 :
bb9ba44aa660825c91b0025c516588b4 24/02/13 ec35e1de8cd867d58e7583e15cce15b4 22/02/13
http call :
http://gogosearch.vizvaz .com/news/bf-iqfzcj-ynsp_gbnnjk-lzst-[REDACTED]]vn-pyaktw-clsnuqlgnsrpsh.html 146.185.255.207 24/02/13