Kovter

From Botnets.fr
Jump to: navigation, search

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Kovter
Alias
Group Police lock
Parent
Sibling
Family
Relations Variants:

Sibling of:
Parent of:
Distribution of:
Campaigns:

Target
Origin
Distribution vector Sakura
UserAgent
CCProtocol
Activity 2013-03 /
Status
Language
Programming language
Operation/Working group

Introduction

2013-03-29 Check you history against a remote list in an attempt to get more credibility will try to show a porn website link on which you've been.

md5

 19561b33793dcb865eae56575a899ce8 2013-03-29

httpget

  83.133.110.7 
   samsero.tk/form.php?mode=2&UID=[REMOVED]&OS=Windows%20XP&OSbit=x32
   samsero.tk/form.php?mode=1&UID=[REMOVED]
   samsero.tk/links.php?mode=1
   samsero.tk//page/index.php

Features

Associated images

Checksums / AV databases

Publications