Difference between revisions of "Uremtoo"

From Botnets.fr
Jump to navigation Jump to search
m (Text replacement - "Unknown, , , " to "")
m (Text replacement - "=Unknown" to "=")
 
(One intermediate revision by the same user not shown)
Line 18: Line 18:
| UserAgent=Opera/9.80 (Windows NT 5.1; U; Edition Yx; en) Presto/2.9.168 Version/11.52
| UserAgent=Opera/9.80 (Windows NT 5.1; U; Edition Yx; en) Presto/2.9.168 Version/11.52
| Group=Police lock
| Group=Police lock
| CCProtocol=Unknown, ,
| CCProtocol= ,
  | Target=
  | Target=
| BeginYear=Unknown
| BeginYear=
| EndYear=Unknown
| EndYear=
| Status=Unknown
| Status=
| Vector=Phoenix, , , ,  
| Vector=Phoenix, , , ,  
| Victime1=
| Victime1=

Latest revision as of 14:44, 8 August 2015

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Uremtoo
Alias
Group Police lock
Parent
Sibling
Family
Relations Variants:

Sibling of:
Parent of:
Distribution of:
Campaigns:

Target
Origin
Distribution vector Phoenix
UserAgent Opera/9.80 (Windows NT 5.1; U; Edition Yx; en) Presto/2.9.168 Version/11.52
CCProtocol
Activity /
Status
Language
Programming language
Operation/Working group

Introduction

It's a variant of Urausy

md5 :

 bb9ba44aa660825c91b0025c516588b4 24/02/13
 ec35e1de8cd867d58e7583e15cce15b4 22/02/13

http call :

   http://gogosearch.vizvaz .com/news/bf-iqfzcj-ynsp_gbnnjk-lzst-[REDACTED]]vn-pyaktw-clsnuqlgnsrpsh.html 146.185.255.207 24/02/13

Features

Associated images

Checksums / AV databases

Publications