Trojan.DownLoader12.29165

Technical Information

To ensure autorun and distribution:

Creates or modifies the following files:

%WINDIR%\Tasks\SA.DAT

Malicious functions:

Executes the following:

'<SYSTEM32>\svchost.exe' -k netsvcs

Modifies file system :

Creates the following files:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Network activity:

Connects to:

'12#.#5.36.23':139
'12#.#5.190.195':139
'12#.#5.118.212':139
'12#.#5.21.162':445
'12#.45.12.6':445
'12#.#5.85.147':445
'12#.#5.234.225':139
'12#.#5.164.251':139
'12#.#5.87.159':139
'12#.#5.107.80':139
'12#.#5.17.120':139
'12#.#5.182.122':139
'12#.#5.190.140':139
'12#.#5.98.215':445
'12#.#5.70.123':445
'12#.#5.104.157':445
'12#.#5.252.133':445
'12#.#5.13.177':445
'12#.#5.27.20':445
'12#.#5.119.85':445
'12#.#5.233.63':445
'12#.#5.237.206':445
'12#.#5.174.153':445
'12#.#5.96.80':445
'12#.#5.63.230':445
'12#.#5.64.67':445
'12#.#5.87.159':445
'12#.#5.107.80':445
'12#.#5.66.107':445
'12#.#5.182.122':445
'12#.#5.190.140':445
'12#.#5.164.251':445
'12#.#5.218.183':445
'12#.#5.95.211':445
'12#.#5.236.63':445
'12#.#5.121.246':445
'12#.#5.146.12':445
'12#.#5.202.145':445
'12#.#5.193.55':445
'12#.#5.202.145':139
'12#.#5.193.55':139
'12#.#5.95.211':139
'12#.#5.66.107':139
'12#.#5.218.183':139
'12#.#5.146.12':139
'12#.#5.236.63':139
'12#.#5.118.212':445
'12#.#5.234.225':445
'12#.#5.17.120':445
'12#.#5.121.246':139
'12#.#5.36.23':445
'12#.#5.190.195':445
'12#.#5.54.126':445
'12#.#5.30.136':139
'12#.#5.138.15':139
'12#.#5.10.243':139
'12#.#5.24.21':139
'12#.#5.149.216':139
'12#.#5.138.159':139
'12#.#5.54.126':139
'12#.#5.98.215':139
'12#.#5.70.123':139
'12#.#5.104.157':139
'12#.#5.252.133':139
'12#.#5.13.177':139
'12#.#5.27.20':139
'12#.#5.131.72':139
'12#.45.9.86':139
'12#.#5.53.30':139
'12#.#5.2.171':445
'12#.#5.172.183':445
'12#.#5.93.211':445
'12#.#5.54.93':139
'12#.45.55.0':139
'12#.#5.121.200':139
'12#.#5.245.230':139
'12#.#5.160.182':139
'12#.#5.232.130':139
'12#.#5.109.211':139
'12#.#5.109.211':445
'12#.45.55.0':445
'12#.#5.121.200':445
'12#.#5.54.93':445
'12#.#5.160.182':445
'12#.#5.232.130':445
'12#.#5.245.230':445
'12#.#5.30.136':445
'12#.#5.138.15':445
'12#.#5.10.243':445
'12#.#5.24.21':445
'12#.#5.149.216':445
'12#.#5.138.159':445
'12#.#5.64.67':139
'12#.#5.233.63':139
'12#.#5.237.206':139
'12#.#5.119.85':139
'12#.#5.96.80':139
'12#.#5.63.230':139
'12#.#5.174.153':139
'12#.#5.131.72':445
'12#.45.9.86':445
'12#.#5.53.30':445
'12#.#5.21.162':139
'12#.45.12.6':139
'12#.#5.85.147':139
'12#.#5.157.127':139
'12#.#5.240.157':139
'12#.#5.34.213':139
'12#.#5.239.59':139
'12#.#5.162.172':139
'12#.#5.102.0':139
'12#.#5.154.24':139
'12#.#5.228.74':139
'12#.#5.0.111':139
'12#.#5.74.54':139
'12#.#5.197.153':139
'12#.#5.201.122':139
'12#.#5.82.80':139
'12#.#5.45.46':445
'12#.#5.155.34':445
'12#.#5.12.31':445
'12#.#5.184.192':445
'12#.#5.50.80':445
'12#.#5.133.216':445
'12#.#5.129.189':445
'12#.#5.97.128':445
'12#.#5.164.64':445
'12#.#5.34.161':445
'12#.#5.138.106':445
'12#.#5.68.152':445
'12#.#5.127.2':445
'12#.#5.0.111':445
'12#.#5.74.54':445
'12#.#5.30.210':445
'12#.#5.201.122':445
'12#.#5.82.80':445
'12#.#5.228.74':445
'12#.#5.132.128':445
'12#.#5.98.38':139
'12#.#5.138.175':139
'12#.#5.99.81':139
'12#.#5.184.84':445
'12#.#5.78.173':445
'12#.#5.124.78':445
'12#.#5.78.173':139
'12#.#5.124.78':139
'12#.#5.239.59':445
'12#.#5.30.210':139
'12#.#5.132.128':139
'12#.#5.184.84':139
'12#.#5.162.172':445
'12#.#5.34.213':445
'12#.#5.154.24':445
'12#.#5.197.153':445
'12#.#5.102.0':445
'12#.#5.157.127':445
'12#.#5.240.157':445
'12#.#5.130.24':445
'12#.#5.70.64':139
'12#.#5.159.70':139
'12#.#5.24.159':139
'12#.#5.176.128':139
'12#.#5.183.147':139
'12#.#5.21.206':139
'12#.#5.130.24':139
'12#.#5.45.46':139
'12#.#5.155.34':139
'12#.#5.12.31':139
'12#.#5.184.192':139
'12#.#5.50.80':139
'12#.#5.133.216':139
'12#.45.8.5':139
'12#.#5.74.125':139
'12#.#5.177.74':139
'12#.#5.4.225':139
'12#.#5.52.92':139
'12#.#5.154.52':139
'12#.#5.223.176':139
'12#.#5.231.22':139
'12#.#5.106.249':139
'12#.#5.129.107':139
'12#.#5.115.224':139
'12#.#5.47.89':139
'12#.#5.19.75':139
'12#.#5.19.75':445
'12#.#5.231.22':445
'12#.#5.106.249':445
'12#.#5.223.176':445
'12#.#5.115.224':445
'12#.#5.47.89':445
'12#.#5.129.107':445
'12#.#5.70.64':445
'12#.#5.159.70':445
'12#.#5.24.159':445
'12#.#5.176.128':445
'12#.#5.183.147':445
'12#.#5.21.206':445
'12#.#5.127.2':139
'12#.#5.97.128':139
'12#.#5.164.64':139
'12#.#5.129.189':139
'12#.#5.138.106':139
'12#.#5.68.152':139
'12#.#5.34.161':139
'12#.45.8.5':445
'12#.#5.74.125':445
'12#.#5.177.74':445
'12#.#5.4.225':445
'12#.#5.52.92':445
'12#.#5.154.52':445
'12#.#5.61.165':445
'12#.#5.234.11':445
'12#.#5.172.216':445
'12#.#5.159.157':445
'12#.#5.28.25':445
'12#.#5.99.60':445
'12#.45.3.73':445
'12#.#5.112.172':445
'12#.#5.163.95':445
'12#.#5.196.20':445
'12#.#5.61.189':445
'12#.#5.154.115':445
'12#.#5.240.30':445
'12#.#5.34.125':445
'12#.#5.47.179':445
'12#.#5.247.239':445
'12#.#5.171.137':445
'12#.#5.52.69':445
'12#.#5.23.178':445
'12#.#5.150.119':445
'12#.#5.170.215':445
'12#.#5.205.170':445
'12#.#5.35.53':445
'12#.#5.71.248':445
'12#.45.14.1':445
'12#.#5.214.206':445
'12#.#5.12.179':445
'12#.#5.148.186':445
'12#.#5.38.200':445
'12#.#5.142.50':445
'12#.#5.2.119':445
'12#.#5.84.81':445
'12#.#5.41.25':445
'12#.#5.171.137':9988
'12#.#5.52.69':9988
'12#.#5.180.148':9988
'12#.45.38.6':445
'12#.#5.17.210':445
'12#.#5.130.180':445
'12#.#5.237.100':445
'12#.#5.163.230':445
'12#.#5.44.169':445
'12#.#5.186.73':445
'12#.#5.144.250':445
'12#.#5.123.122':445
'12#.#5.170.71':445
'12#.#5.87.36':445
'12#.#5.253.92':445
'12#.#5.254.112':445
'12#.#5.17.21':445
'12#.#5.15.93':445
'12#.#5.36.41':445
'12#.#5.180.148':445
'12#.#5.28.25':139
'12#.#5.99.60':139
'12#.#5.61.165':139
'12#.#5.205.170':139
'12#.#5.35.53':139
'12#.#5.159.157':139
'12#.#5.234.11':139
'12#.#5.61.189':139
'12#.#5.240.30':139
'12#.#5.112.172':139
'12#.#5.172.216':139
'12#.45.3.73':139
'12#.#5.154.115':139
'12#.#5.52.69':139
'12#.#5.23.178':139
'12#.#5.34.125':139
'12#.#5.116.194':139
'12#.#5.180.148':139
'12#.#5.171.137':139
'12#.#5.47.179':139
'12#.45.14.1':139
'12#.#5.214.206':139
'12#.#5.170.215':139
'12#.#5.247.239':139
'12#.#5.150.119':139
'12#.#5.71.248':139
'12#.#5.2.119':139
'12#.#5.84.81':139
'12#.#5.12.179':139
'12#.#5.253.92':139
'12#.#5.254.112':139
'12#.#5.142.50':139
'12#.#5.148.186':139
'12#.#5.17.210':139
'12#.#5.130.180':139
'12#.#5.116.194':445
'12#.#5.38.200':139
'12#.#5.41.25':139
'12#.45.38.6':139
'12#.#5.144.250':139
'12#.#5.123.122':139
'12#.#5.163.230':139
'12#.#5.163.95':139
'12#.#5.196.20':139
'12#.#5.186.73':139
'12#.#5.237.100':139
'12#.#5.15.93':139
'12#.#5.36.41':139
'12#.#5.87.36':139
'12#.#5.44.169':139
'12#.#5.170.71':139
'12#.#5.17.21':139
'12#.#5.154.234':445
'12#.45.7.91':445
'12#.#5.107.190':445
'12#.#5.94.28':445
'12#.#5.36.206':445
'12#.#5.69.223':445
'12#.#5.80.107':139
'12#.45.95.0':139
'12#.#5.29.75':139
'12#.#5.246.116':139
'12#.#5.132.7':139
'12#.#5.248.55':139
'12#.#5.62.187':139
'12#.#5.194.175':445
'12#.#5.125.207':445
'12#.#5.129.184':445
'12#.#5.109.160':445
'12#.#5.165.109':445
'12#.#5.24.120':445
'12#.#5.37.33':445
'12#.#5.216.186':445
'12#.#5.22.172':445
'12#.#5.173.246':445
'12#.#5.177.115':445
'12#.#5.76.70':445
'12#.#5.158.108':445
'12#.#5.29.75':445
'12#.#5.246.116':445
'12#.#5.204.38':445
'12#.#5.248.55':445
'12#.#5.62.187':445
'12#.45.95.0':445
'12#.#5.153.100':445
'12#.#5.141.184':445
'12#.#5.191.141':445
'12#.#5.124.204':445
'12#.#5.17.11':445
'12#.#5.55.220':445
'12#.#5.115.91':445
'12#.#5.55.220':139
'12#.#5.115.91':139
'12#.#5.141.184':139
'12#.#5.204.38':139
'12#.#5.153.100':139
'12#.#5.17.11':139
'12#.#5.191.141':139
'12#.#5.93.211':139
'12#.#5.80.107':445
'12#.#5.132.7':445
'12#.#5.124.204':139
'12#.#5.2.171':139
'12#.#5.172.183':139
'12#.#5.156.163':445
'12#.#5.207.60':139
'12#.#5.131.217':139
'12#.#5.57.33':139
'12#.#5.134.87':139
'12#.#5.51.108':139
'12#.#5.135.209':139
'12#.#5.156.163':139
'12#.#5.194.175':139
'12#.#5.125.207':139
'12#.#5.129.184':139
'12#.#5.109.160':139
'12#.#5.165.109':139
'12#.#5.24.120':139
'12#.#5.154.115':9988
'12#.#5.163.230':9988
'12#.#5.44.169':9988
'12#.#5.116.194':9988
'12#.#5.150.119':9988
'12#.#5.172.216':9988
'12#.#5.87.146':139
'12#.#5.45.123':139
'12#.#5.23.46':139
'12#.#5.84.93':139
'12#.#5.62.59':139
'12#.#5.68.223':139
'12#.#5.123.77':139
'12#.#5.123.77':445
'12#.#5.45.123':445
'12#.#5.23.46':445
'12#.#5.87.146':445
'12#.#5.62.59':445
'12#.#5.68.223':445
'12#.#5.84.93':445
'12#.#5.207.60':445
'12#.#5.131.217':445
'12#.#5.57.33':445
'12#.#5.134.87':445
'12#.#5.51.108':445
'12#.#5.135.209':445
'12#.#5.158.108':139
'12#.#5.216.186':139
'12#.#5.22.172':139
'12#.#5.37.33':139
'12#.#5.177.115':139
'12#.#5.76.70':139
'12#.#5.173.246':139
'12#.45.7.91':139
'12#.#5.154.234':139
'12#.#5.107.190':139
'12#.#5.94.28':139
'12#.#5.36.206':139
'12#.#5.69.223':139

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней