mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
Joseph Walter
22 lines
789 B
Markdown
22 lines
789 B
Markdown
|||
|
|
|---------|------------------------|
|
|
|**ID**|**X0010**|
|
|
|**Aliases**|Bobax|
|
|
|**Platforms**|Windows|
|
|
|**Year**| 2008 |
|
|
|
|
|
|
Kraken
|
|
======
|
|
A family of bots.
|
|
|
|
Behaviors
|
|
---------
|
|
|Name|Use|
|
|
|---------------------|-------------------------------------------------------|
|
|
|[Domain Name Generation](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control/domain-name-generate.md) | Uses a domain name generator. [[1]](#1)|
|
|
|[Evade Memory Dump](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis/evade-memory-dump.md) | Dumping Kraken's c.dll module from the heap of its own process is tricky because its PE-header is wiped out. [[1]](#1)|
|
|
|
|
References
|
|
----------
|
|
<a name="1">[1]</a> http://blog.threatexpert.com/2008/04/kraken-changes-tactics.html |