Skip navigation.
Home

Large Batch of Kraken Samples

Paul Royal was gracious enough to send a large collection of Kraken samples. You can download them from the list here. Thanks Paul!

10fd78f9681d66d2dd39816b5f7f6ea6
10fd78f9681d66d2dd39816b5f7f6ea6
18d16a05155748d65bdb41145e98912f
18d16a05155748d65bdb41145e98912f
210d237f108bfcb23d987d8fa2f3d1c6
210d237f108bfcb23d987d8fa2f3d1c6
23ff402c9df630d9bad31515edc21dae
23ff402c9df630d9bad31515edc21dae
266720e7e859e0720e52d8d266629f10
266720e7e859e0720e52d8d266629f10
3f3a945c792ab722b155f3305b8581f4
3f3a945c792ab722b155f3305b8581f4
421333c17cb43ff7e5f961f5f13e2911
421333c17cb43ff7e5f961f5f13e2911
4629d0f73a48df3ee3be4d152fdb85f6
4629d0f73a48df3ee3be4d152fdb85f6
483580b7b95be355de57b1ee940a889b
483580b7b95be355de57b1ee940a889b
485cd52e44d3df1f499fddcebcf140b6
485cd52e44d3df1f499fddcebcf140b6
4abbfe22e4803a9e931417a9d88f787e
4abbfe22e4803a9e931417a9d88f787e
4b590486cf8c046658c64104472e397d
4b590486cf8c046658c64104472e397d
52f13701ae011d1b98092d07bcaad043
52f13701ae011d1b98092d07bcaad043
5639a80421a098c9ce089fd335c04f50
5639a80421a098c9ce089fd335c04f50
592523a88df3d043d61a14b11a79bd55
592523a88df3d043d61a14b11a79bd55
60838eeb3f8cd311de0faef80909632d
60838eeb3f8cd311de0faef80909632d
62587160387c9bac604b99e4074055b9
62587160387c9bac604b99e4074055b9
6b4a99574af6ae5d2be703e91a35a36c
6b4a99574af6ae5d2be703e91a35a36c
6dc48be5a53570ea63c02f178ebc7bcd
6dc48be5a53570ea63c02f178ebc7bcd
6efe376e306aa63caf956a8a1e13a2d5
6efe376e306aa63caf956a8a1e13a2d5
77cf14bf1d0d88e6e6b9a0b99f8490ed
77cf14bf1d0d88e6e6b9a0b99f8490ed
790c57dbcfae6ce122aac830065e0320
790c57dbcfae6ce122aac830065e0320
7ecef2f126e66e7270afa7b803f715bc
7ecef2f126e66e7270afa7b803f715bc
84446abe47a16387bd1f890ec05c3b9b
84446abe47a16387bd1f890ec05c3b9b
88a94a282417ee2a8c17bc6ee3613de9
88a94a282417ee2a8c17bc6ee3613de9
8d96002e1374351936da764f65708740
8d96002e1374351936da764f65708740
98194f186669fb13751408eb858f40aa
98194f186669fb13751408eb858f40aa
981b353926deea203a61d4873ef94ede
981b353926deea203a61d4873ef94ede
9e6e57eda3eb3ea0fcae81b349191944
9e6e57eda3eb3ea0fcae81b349191944
a48832210b4a05a7c0196d0208e6b8cd
a48832210b4a05a7c0196d0208e6b8cd
ac37b1045c51b1b86744970b75a8e350
ac37b1045c51b1b86744970b75a8e350
afb4b7f8be2965687fce33f9d0a80338
afb4b7f8be2965687fce33f9d0a80338
b0e7ac28f0a899afa0fcdda5f1252675
b0e7ac28f0a899afa0fcdda5f1252675
b3c78f1e7e81c02eed092e6f813a06df
b3c78f1e7e81c02eed092e6f813a06df
c05eb75e00d54a041a057934979fed6d
c05eb75e00d54a041a057934979fed6d
c51abb75de3f8f8c225dacfbe1c2c715
c51abb75de3f8f8c225dacfbe1c2c715
c5d9edfa62368f8e93065e6912fbde3c
c5d9edfa62368f8e93065e6912fbde3c
c7b440803846e413c7b417b16046d6d1
c7b440803846e413c7b417b16046d6d1
c853373764d86b927472766bd622e1ee
c853373764d86b927472766bd622e1ee
cc16f5fdf705fe76f61588561f866c29
cc16f5fdf705fe76f61588561f866c29
cc33d7d6a6d901ddaa72fdf18d6bfb7e
cc33d7d6a6d901ddaa72fdf18d6bfb7e
d4331f7d1bc564772dc55ff80b5286da
d4331f7d1bc564772dc55ff80b5286da
d4749ef1edaf4c58e323973430acb964
d4749ef1edaf4c58e323973430acb964
d527bf3602107be86909fcf986155f51
d527bf3602107be86909fcf986155f51
ddb00e36e919802f92a7a99c7f933ea3
ddb00e36e919802f92a7a99c7f933ea3
e5f9da179ece84c0c7ec0b325cb9194f
e5f9da179ece84c0c7ec0b325cb9194f
e6dcca6961f79df9b63bf6c311cfd183
e6dcca6961f79df9b63bf6c311cfd183
ee3a48d89399e3ad6b1576a28db4d30d
ee3a48d89399e3ad6b1576a28db4d30d
efa97074d07523e9aa8709e1c36b42fc
efa97074d07523e9aa8709e1c36b42fc
f2c34a56a33ee7a22e77a217f5c9e92b
f2c34a56a33ee7a22e77a217f5c9e92b
f403a99808137c1b4b5319e4d63f6dcc
f403a99808137c1b4b5319e4d63f6dcc
fb57076a1a523f7a214634f52f934e6b
fb57076a1a523f7a214634f52f934e6b
ffc2e41d8e729c7b8622a8420767cfb5
ffc2e41d8e729c7b8622a8420767cfb5

Thanks

Thanks for the large amount of samples Paul!

kraken propagation

I was wondering how the Kraken bot
is getting propagated -- is it through
social engineering (with links in spam)
or through some other mechanism? Any
info will be much appreciated.

It spreads through MSN

It spreads through MSN messenger, uses social engineering techniques to let MSN contacts download these so called zip files, apparently sent from their buddies...

How Kraken spreads

On the last comment I read concerning download of so-called zip files via MSN Messenger, is this via an HTTP link delivered over the IM session, or is this download via a file transfer?

Also, from what source are you hearing, or do you know personally, that IM is the only confirmed attack vector for Kraken thus far?

Thank you!
Kind regards,
Brian