mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
ryan
11 lines
573 B
Plaintext
11 lines
573 B
Plaintext
Kraken X0010
|
||
Date 2008
|
||
Reference [1] http://blog.threatexpert.com/2008/04/kraken-changes-tactics.html
|
||
|
||
|
||
Command and Control::Dynamic Resolution:Domain Generation Algorithms (T1568.002) [1] Uses a domain name generator.
|
||
Command and Control::Application Layer Protocol::Web Protocols (T1568.002) [1] The malware uses HTTP to communicate with C2
|
||
|
||
Command and Control::Domain Name Generation (B0003) [1]
|
||
Anti-Behavioral Analysis::Memory Dump Evasion (B0006) [1] Dumping Kraken's c.dll module from the heap of its own process is tricky because its PE-header is wiped out.
|