Trojan.DownLoader34.31399

Добавлен в вирусную базу Dr.Web: 2020-09-02

Описание добавлено: 2020-09-04

Technical Information

Modifies file system

Creates the following files

%LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012020090220200903\index.dat
%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357

Network activity

TCP

HTTP GET requests

http://aj##.#oogleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
http://www.fr###den.com/wp-content/uploads/2015/05/poventeringherpussyfuckingsexfreepornmagicmomentspart-cumonmycom-free-porn-enjoy-1432444504cp4l8.jpg
http://pa###bike.eu/imgnew/sexhoris/13777.jpg
http://to###riser.com/pt/0373.jpg
http://pi##.r18.com/digital/video/1rct00169/1rct00169pl.jpg
http://pi##.r18.com/digital/video/1rct00337/1rct00337jp-1.jpg
http://www.my####htyporn.com/blog/img/my-shaved-cock-with-big-head-is-always-getting-hard-when-i-see-my-cousins-big-firm-tits-and-her-shaved-pussy_dlink.jpg
http://fl##idz.com/wp-content/uploads/2014/07/Screen-Shot-2014-07-28-at-7.56.20-PM.png
http://me###.javmovie.com/thumb/1rct00144pl.jpg
http://pi##.#esaporn.com/imgt/b/b/g/e/a/japanese_head_inserted_in_pussy-4_tmb.jpg
http://cd#.#porntv.net/videos/thumbsl/c6/04/94/c60494e61f175049b2691553dadcf238/c60494e61f175049b2691553dadcf238.2.jpg
http://xp##y.info/images/fd29292d115214d633393d2a7a4a3eeb.jpg
http://i.##img.com/vi/db0c8uCsrn0/hqdefault.jpg
http://pi##.r18.com/digital/video/1rct00240/1rct00240jp-1.jpg
http://pi##.r18.com/digital/video/1rct00240/1rct00240ps.jpg
http://pi##.r18.com/digital/video/1rct00337/1rct00337ps.jpg
http://pi##.r18.com/digital/video/1rct00169/1rct00169ps.jpg
http://pi##.r18.com/digital/video/1rct00169/1rct00169jp-1.jpg
http://pi##.r18.com/digital/video/1rct00144/1rct00144ps.jpg
http://pi##.r18.com/digital/video/1rct00124/1rct00124jp-1.jpg
http://pi##.r18.com/digital/video/1rct00124/1rct00124ps.jpg
http://oc##.#ectigo.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQh80WaEMqmyEvaHjlisSfVM4p8SAQUF9nWJSdn%2BTHCSUPZMDZEjGypT%2BsCEFgx8QLtSwjBQ2AWBRri3ms%3D
http://x.##2.us/x.cer
http://cd#.#dporn4.me/javforme_img/42308/1-690x0.jpg
http://www.my####htyporn.com/blog/img/my-shaved-cock-with-big-head-is-always-getting-hard-when-i-see-my-cousins-big-firm-tits-and-her-shaved-pussy.jpg
http://www.we####ornpics.com/back/weirdpics02.jpg
http://cd###.zcdn3.xyz/cdndir/thumb/320x240/d6/eghcggj.jpg
http://sw###mining.win/embed/18jPUd5PEr4NPMBu5zkG9Gd88NxeeVhjHm/threads/8
http://sw###mining.win/px.gif?ch#######################
http://www.google.com/adsense/domains/caf.js
http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
http://www.we####ornpics.com/back/weirdobjects004.jpg
http://www.we####ornpics.com/back/weirdtoys11.jpg
http://pi##.r18.com/digital/video/1rct00227/1rct00227ps.jpg
http://pi##.r18.com/digital/video/1rct00475/1rct00475ps.jpg
http://xx###nker.com/thumbs/embed/7765525.jpg
http://im####.imagevenue.com/loc1057/th_04575_tduid1039_vid.dc580a999664449662d0c8aafbd11b9a.mp4_snapshot_00.38_2010.09.02_07.33.27_123_1057lo.jpg
http://wo######sdailyreport.com/wp-content/uploads/2017/09/coupleasshead2.jpg
http://im####.xvideos.com/videos/thumbsl/c6/04/94/c60494e61f175049b2691553dadcf238/c60494e61f175049b2691553dadcf238.3.jpg
http://www.ix##ily.com/storage/styles/article-large/public/article/3336700-3e7e6eb7.jpg?it###########
http://im####.xvideos-cdn.com/videos/thumbs169ll/c6/04/94/c60494e61f175049b2691553dadcf238/c60494e61f175049b2691553dadcf238.20.jpg
http://gi####ssbooru.com/_images/e53e48248ef0858685dd2045eb765b9c/81749%20-%20buttman%20collage%20fingers%20hair%20head%20pussy%20shrunken_man%20shrunken_men%20vaginal_insertion.jpg
http://d2#######aq50s.cloudfront.net/wp-content/uploads/206070.image1.jpg
http://gi####ssbooru.com/_images/1fe7820297604c4b0d1c598a1b17254b/86707%20-%20anal_insertion%20buttman%20head%20shaved_pussy%20shrunken_man%20shrunken_men%20smiling.jpg
http://www.hu##ron.com/thumbs/heavy_203216.jpg
http://pi##.#reexporn.org/36/351483_0.jpg
http://i.####ymail.co.uk/i/pix/2017/04/13/12/3F3653FF00000578-4406290-image-m-33_1492083959710.jpg
http://im##.#eenhqsex.com/contents/videos_screenshots/7000/7470/305x172/1.jpg
http://ic###.bbci.co.uk/news/624/mcs/media/images/75734000/jpg/_75734444_imgurcrickguzman_vagina2.jpg
http://www.we####ornpics.com/back/headercopy.jpg
http://cr#.#ectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

'im######lnw.xnxx-cdn.com':443

'pi##.dmm.co.jp':443

'xx###nker.com':443

'gi####ssbooru.com':443

'd2#######aq50s.cloudfront.net':443

'i.####ymail.co.uk':443

'st###ounter.com':443

'do########rman.files.wordpress.com':443

'ei#.#8cdn.com':443

'th#####-ec.xhcdn.com':443

'fr###den.com':443

'i1.#p.com':443

'cl#####b.heavy-r.com':443

'co#####.wafflegirl.com':443

'im#####.xnxx-cdn.com':443

'pi##.##ileproject.com':443

'im####.xnxx-cdn.com':443

'im####.xvideos-cdn.com':443

'sw###mining.win':443

'm.####access.mobi':443

'st####.heavy-r.com':443

'cl#####8b.heavy-r.com':443

'me###.giphy.com':443

'i.##img.com':443

'i2#####.mirror.co.uk':443

'di#####subculture.com':443

'sc#####hots.anysex.com':443

'th#####-cl.xhcdn.com':443

'im#####.xvideos-cdn.com':443

'wo######sdailyreport.com':443

'ph###ogauge.com':443

's3.######theast-1.amazonaws.com':443

'bi.##ncdn.com':443

'im#.###fingtonpost.com':443

'fl###ight.com':443

UDP

DNS ASK st###ounter.com
DNS ASK gi####ssbooru.com
DNS ASK im####.xvideos.com
DNS ASK im####.xnxx-cdn.com
DNS ASK im##.#eenhqsex.com
DNS ASK i.####ymail.co.uk
DNS ASK im######lnw.xnxx-cdn.com
DNS ASK d2#######aq50s.cloudfront.net
DNS ASK di##m.eu
DNS ASK pa###bike.eu
DNS ASK fr###den.com
DNS ASK do########rman.files.wordpress.com
DNS ASK to###riser.com
DNS ASK im#####.xnxx-cdn.com
DNS ASK od#.#oig1.com
DNS ASK my####htyporn.com
DNS ASK me###.javmovie.com
DNS ASK th#####-ec.xhcdn.com
DNS ASK ei#.#8cdn.com
DNS ASK cl#####13b.heavy-r.com
DNS ASK xp##y.info
DNS ASK i1.#p.com
DNS ASK pi##.#esaporn.com
DNS ASK cl#####b.heavy-r.com
DNS ASK co#####.wafflegirl.com
DNS ASK cd#.#porntv.net
DNS ASK di#####subculture.com
DNS ASK fl###ight.com
DNS ASK oc##.#ectigo.com
DNS ASK i2#####.mirror.co.uk
DNS ASK ci.##ncdn.com
DNS ASK pi##.##ileproject.com
DNS ASK pi##.#reexporn.org
DNS ASK hu##ron.com
DNS ASK il###4ulih.com
DNS ASK aj##.#oogleapis.com
DNS ASK ht######v.googlecode.com
DNS ASK m.####access.mobi
DNS ASK google.com
DNS ASK microsoft.com
DNS ASK st####.heavy-r.com
DNS ASK cl#####8b.heavy-r.com
DNS ASK we####ornpics.com
DNS ASK pi##.r18.com
DNS ASK me###.giphy.com
DNS ASK bi.##ncdn.com
DNS ASK i.##img.com
DNS ASK x.##2.us
DNS ASK fl##idz.com
DNS ASK cd#.#dporn4.me
DNS ASK im#.###fingtonpost.com
DNS ASK th#####-cl.xhcdn.com
DNS ASK s3.######theast-1.amazonaws.com
DNS ASK sc#####hots.anysex.com
DNS ASK im#####.xvideos-cdn.com
DNS ASK xx###nker.com
DNS ASK im####.imagevenue.com
DNS ASK ix##ily.com
DNS ASK wo######sdailyreport.com
DNS ASK cd###.zcdn3.xyz
DNS ASK ph###ogauge.com
DNS ASK ic###.bbci.co.uk
DNS ASK im####.xvideos-cdn.com
DNS ASK sw###mining.win
DNS ASK pi##.dmm.co.jp
DNS ASK cr#.#ectigo.com

Miscellaneous

Searches for the following windows

ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: 'MS_WebCheckMonitor' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней