MBCProject-mbc-markdown/xample-malware/conficker.md

ID	X0003
Aliases	Downup, Downadup, Kido
Platforms	Windows
Year	2008

Conficker

A worm targeting Microsoft Windows operations systems.

Behaviors

Name	Use
Domain Name Generation	Uses a domain name generator. [1]
Conditional Execution	Conficker A has routine that causes the process to suicide if the keyboard language layout is set to Ukrainian. [2]

References

[1] https://en.wikipedia.org/wiki/Conficker [2] http://www.csl.sri.com/users/vinod/papers/Conficker/