MBCProject-mbc-markdown/xample-malware/bagle.md

ID	X0001
Aliases	None
Platforms	Windows
Year	2004
Associated ATT&CK Software	None

Bagle

A mass-mailing computer worm affecting Microsoft Windows. [1]

Behaviors

Name	Use
Prevent Concurrent Execution	Some variants look for an unnamed mutex to ensure only one copy of itself is running on a system. [2]
Send Email	Bagle uses its own SMTP engine to mass-mail itself as an attachment from an infected computer. [3]

References

[1] https://en.wikipedia.org/wiki/Bagle_(computer_worm)

[2] https://www.trendmicro.com/vinfo/us/threat-encyclopedia/archive/malware/worm_bagle.u

[3] https://en.wikipedia.org/wiki/Bagle_(computer_worm)