Command and Control

From ema
Jump to: navigation, search
EMA ID: ema-1017
Description: Indicates that the malware instance is able to communicate (receive and/or execute remotely submitted commands) with systems under its control within a target network.
Associated Attributes: Command and Control: frequency, Command and Control: port number, Common: applicable platform, Common: encryption algorithm, Common: network protocol, Common: technique
Aliases: c2

Associated With Command and Control
Behavior.png check for payload Behavior.png generate c2 domain name(s) Behavior.png request email template Behavior.png send system information Behavior.png update configuration
Behavior.png control malware via remote command Behavior.png request email address list Behavior.png send beacon Behavior.png test SMTP connection  


,
,
,
,
,