Trojan.Starman.4832

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1112 -dm 7 7 %TEMP%\WER2cbe.dir00\svchost.exe.mdmp 16325836412029264

Изменения в файловой системе:

Создает следующие файлы:

%WINDIR%\Help\jjlenkbt.exe
%WINDIR%\Help\tsbjbtvn.exe
%WINDIR%\Help\hwexrtne.exe
%WINDIR%\Help\jbnshhqj.exe
%WINDIR%\Help\bzehxvnz.exe

Сетевая активность:

Подключается к:

'61.##2.16.168':445
'61.##2.231.16':445
'61.##2.218.138':445
'61.##2.112.160':445
'61.##2.237.44':139
'61.##2.231.220':445
'61.##2.71.63':445
'61.##2.150.41':445
'61.##2.117.116':445
'61.##2.237.44':445
'61.##2.112.227':445
'61.##2.151.246':445
'61.##2.191.62':445
'61.##2.82.177':445
'61.##2.112.160':139
'61.##2.16.168':139
'61.##2.231.16':139
'61.##2.71.63':139
'61.##2.216.137':445
'61.##2.24.131':139
'61.##2.231.220':139
'61.##2.112.227':139
'61.##2.150.41':139
'61.##2.117.116':139
'61.##2.82.177':139
'61.##2.218.138':139
'61.##2.151.246':139
'61.##2.191.62':139
'61.##2.44.237':139
'61.##2.155.6':139
'61.##2.232.154':139
'61.##2.227.190':139
'61.##2.31.113':139
'61.##2.43.185':139
'61.##2.151.121':139
'61.##2.170.94':139
'61.##2.16.195':139
'61.##2.225.26':139
'61.##2.154.125':139
'61.##2.183.37':139
'61.##2.221.24':139
'61.##2.7.198':139
'61.##2.37.150':139
'61.##2.250.210':445
'61.##2.40.19':139
'61.##2.138.203':139
'61.##2.250.210':139
'61.##2.89.142':139
'61.##2.5.254':139
'61.##2.16.202':139
'61.##2.232.123':139
'61.#92.2.60':139
'61.##2.53.141':139
'61.##2.136.186':139
'61.##2.15.175':139
'61.##2.110.119':139
'61.##2.88.224':139
'61.##2.217.128':445
'61.##2.78.89':445
'61.##2.97.75':445
'61.##2.216.137':139
'61.##2.191.223':139
'61.##2.38.186':139
'61.##2.138.5':139
'61.##2.46.36':445
'61.##2.209.4':445
'61.##2.20.238':445
'61.##2.218.86':445
'61.##2.117.131':445
'61.##2.143.227':445
'61.##2.118.192':445
'61.##2.12.85':139
'61.##2.23.251':139
'61.##2.59.102':139
'61.##2.118.186':139
'61.##2.153.227':139
'61.##2.68.222':139
'61.##2.17.119':139
'61.##2.52.100':139
'61.##2.172.160':139
'61.##2.56.239':139
'61.#92.98.4':139
'61.##2.200.39':139
'61.##2.102.218':139
'61.##2.110.78':139
'61.##2.22.81':445
'61.##2.59.102':445
'61.##2.200.39':445
'61.##2.102.218':445
'61.##2.23.251':445
'61.##2.17.119':445
'61.##2.118.186':445
'61.##2.12.85':445
'61.##2.56.239':445
'61.##2.191.223':445
'61.##2.38.186':445
'61.##2.172.160':445
'61.##2.110.78':445
'61.#92.98.4':445
'61.##2.52.100':445
'61.##2.225.21':445
'61.##2.146.74':445
'61.##2.56.111':445
'61.##2.214.22':445
'61.##2.32.197':445
'61.##2.56.252':445
'61.##2.201.53':445
'61.##2.182.219':445
'61.##2.153.227':445
'61.##2.68.222':445
'61.##2.54.88':445
'61.##2.253.100':445
'61.##2.224.253':445
'61.##2.25.247':445
'61.##2.114.154':139
'61.##2.92.143':139
'61.##2.98.92':139
'61.##2.87.248':139
'61.##2.143.126':139
'61.##2.119.98':445
'61.##2.159.119':445
'61.##2.147.42':445
'61.##2.68.23':139
'61.##2.63.235':139
'61.##2.134.56':139
'61.##2.132.39':139
'61.##2.87.248':445
'61.##2.214.95':139
'61.##2.179.163':139
'61.##2.40.80':445
'61.##2.45.228':445
'61.##2.134.193':445
'61.##2.147.42':139
'61.##2.111.66':139
'61.##2.119.98':139
'61.##2.159.119':139
'61.##2.124.246':445
'61.##2.85.126':445
'61.##2.111.66':445
'61.##2.246.156':445
'61.##2.11.135':445
'61.##2.154.11':445
'61.##2.77.154':445
'61.##2.48.125':139
'61.##2.78.58':139
'61.##2.88.78':139
'61.##2.229.253':139
'61.##2.95.141':139
'61.#92.5.49':139
'61.##2.194.231':139
'61.##2.33.103':139
'61.##2.142.34':139
'61.##2.188.165':139
'61.##2.124.58':139
'61.##2.101.169':139
'61.##2.236.5':139
'61.##2.114.33':139
'61.##2.22.231':445
'61.##2.206.59':139
'61.##2.175.205':139
'61.##2.56.176':139
'61.##2.59.154':139
'61.##2.44.229':139
'61.##2.203.66':139
'61.##2.112.126':139
'61.##2.182.148':139
'61.##2.74.182':139
'61.##2.45.179':139
'61.##2.24.211':139
'61.##2.215.212':139
'61.##2.165.139':139
'61.##2.221.67':139
'61.##2.88.224':445
'61.##2.136.186':445
'61.##2.232.123':445
'61.##2.110.119':445
'61.##2.40.19':445
'61.##2.138.203':445
'61.##2.15.175':445
'61.##2.170.94':445
'61.##2.31.113':445
'61.##2.155.6':445
'61.##2.151.121':445
'61.#92.2.60':445
'61.##2.53.141':445
'61.##2.43.185':445
'61.##2.128.188':139
'61.##2.145.74':139
'61.##2.94.160':139
'61.##2.250.150':139
'61.##2.26.115':139
'61.##2.226.25':139
'61.##2.24.185':139
'61.##2.89.142':445
'61.##2.5.254':445
'61.##2.16.202':445
'61.##2.44.237':445
'61.##2.138.222':139
'61.##2.43.144':139
'61.#92.2.7':139
'61.##2.232.154':445
'61.#92.2.7':445
'61.##2.40.80':139
'61.##2.45.228':139
'61.##2.43.144':445
'61.##2.145.74':445
'61.##2.94.160':445
'61.##2.138.222':445
'61.##2.246.156':139
'61.##2.124.246':139
'61.##2.85.126':139
'61.##2.77.154':139
'61.##2.134.193':139
'61.##2.11.135':139
'61.##2.154.11':139
'61.##2.183.37':445
'61.##2.16.195':445
'61.##2.225.26':445
'61.##2.37.150':445
'61.##2.227.190':445
'61.##2.221.24':445
'61.##2.7.198':445
'61.##2.24.185':445
'61.##2.250.150':445
'61.##2.128.188':445
'61.##2.226.25':445
'61.##2.154.125':445
'61.##2.114.154':445
'61.##2.26.115':445
'61.##2.98.68':445
'61.##2.95.78':445
'61.##2.202.131':445
'61.##2.243.19':445
'61.##2.187.172':445
'61.##2.121.235':445
'61.##2.36.70':445
'61.##2.46.96':445
'61.##2.146.1':445
'61.##2.214.210':445
'61.##2.220.225':445
'61.##2.138.140':445
'61.##2.59.51':445
'61.##2.100.242':445
'61.##2.235.103':445
'61.##2.9.160':445
'61.##2.62.96':445
'61.##2.78.71':445
'61.##2.10.12':445
'61.##2.206.29':445
'61.##2.237.163':445
'61.##2.176.21':445
'61.##2.122.184':445
'61.##2.235.183':445
'61.##2.244.195':445
'61.##2.149.129':445
'61.##2.12.183':445
'61.##2.49.225':445
'61.##2.55.197':445
'61.##2.114.193':139
'61.##2.76.114':139
'61.##2.53.29':139
'61.##2.132.61':9988
'61.##2.201.233':445
'61.##2.116.136':445
'61.##2.237.163':9988
'61.##2.85.188':139
'61.##2.113.68':139
'61.##2.112.75':139
'61.##2.208.28':139
'61.##2.254.212':139
'61.##2.42.19':139
'61.##2.180.125':139
'61.##2.16.28':445
'61.##2.135.83':445
'61.##2.100.113':445
'61.##2.87.170':445
'61.##2.104.22':445
'61.##2.127.3':445
'61.##2.156.209':445
'61.##2.29.132':445
'61.##2.151.99':445
'61.##2.103.116':445
'61.##2.94.16':445
'61.##2.127.205':445
'61.##2.165.27':445
'61.#92.34.3':445
'61.##2.94.16':139
'61.##2.176.21':139
'61.##2.214.210':139
'61.##2.49.225':139
'61.##2.103.116':139
'61.##2.244.195':139
'61.##2.151.99':139
'61.##2.36.70':139
'61.##2.62.96':139
'61.##2.243.19':139
'61.##2.135.83':139
'61.##2.187.172':139
'61.##2.46.96':139
'61.##2.122.184':139
'61.##2.121.235':139
'61.##2.92.52':139
'61.##2.132.61':139
'61.##2.29.132':139
'61.##2.42.235':139
'61.##2.100.242':139
'61.##2.39.251':139
'61.##2.138.140':139
'61.##2.235.183':139
'61.##2.87.170':139
'61.##2.79.217':139
'61.##2.12.183':139
'61.##2.10.12':139
'61.##2.242.214':139
'61.##2.165.27':139
'61.##2.149.129':139
'61.##2.104.22':139
'61.##2.156.209':139
'61.##2.78.71':139
'61.##2.59.51':139
'61.##2.237.163':139
'61.##2.206.29':139
'61.##2.92.52':445
'61.##2.42.235':445
'61.##2.39.251':445
'61.##2.242.214':445
'61.##2.55.197':139
'61.##2.132.61':445
'61.##2.79.217':445
'61.##2.98.68':139
'61.##2.9.160':139
'61.##2.100.113':139
'61.##2.95.78':139
'61.##2.201.233':139
'61.##2.127.3':139
'61.##2.220.225':139
'61.##2.116.136':139
'61.##2.146.1':139
'61.##2.235.103':139
'61.##2.202.131':139
'61.#92.34.3':139
'61.##2.16.28':139
'61.##2.127.205':139
'61.##2.203.145':139
'61.#92.30.9':445
'61.##2.242.29':445
'61.##2.196.241':445
'61.#92.9.79':445
'61.##2.109.20':445
'61.##2.197.107':445
'61.##2.78.197':445
'61.##2.136.162':445
'61.##2.217.128':139
'61.##2.168.189':139
'61.##2.66.61':445
'61.##2.123.85':445
'61.##2.66.61':139
'61.##2.136.162':139
'61.#92.0.35':445
'61.##2.42.253':445
'61.##2.33.94':445
'61.##2.23.233':445
'61.#92.88.5':445
'61.##2.16.200':445
'61.##2.94.173':445
'61.##2.52.164':445
'61.#92.0.96':445
'61.##2.237.17':445
'61.##2.234.94':445
'61.##2.32.207':445
'61.##2.56.241':445
'61.##2.132.91':445
'61.##2.78.89':139
'61.##2.176.10':139
'61.##2.13.238':139
'61.##2.146.74':139
'61.##2.39.98':139
'61.##2.214.22':139
'61.##2.225.21':139
'61.##2.166.224':139
'61.##2.54.88':139
'61.##2.37.203':139
'61.##2.182.219':139
'61.##2.25.247':139
'61.##2.56.111':139
'61.##2.253.100':139
'61.##2.224.253':139
'61.##2.118.192':139
'61.##2.218.86':139
'61.##2.46.36':139
'61.##2.19.50':139
'61.##2.97.75':139
'61.##2.117.131':139
'61.##2.143.227':139
'61.##2.116.29':139
'61.##2.56.252':139
'61.##2.201.53':139
'61.##2.32.197':139
'61.##2.209.4':139
'61.##2.20.238':139
'61.##2.22.81':139
'61.##2.33.94':139
'61.##2.32.207':139
'61.##2.56.241':139
'61.##2.42.253':139
'61.##2.94.173':139
'61.##2.23.233':139
'61.#92.0.35':139
'61.##2.237.17':139
'61.##2.109.20':139
'61.##2.197.107':139
'61.#92.0.96':139
'61.##2.132.91':139
'61.##2.52.164':139
'61.##2.234.94':139
'61.##2.137.36':139
'61.##2.165.198':139
'61.##2.242.96':139
'61.##2.35.220':139
'61.##2.119.57':139
'61.##2.226.118':139
'61.##2.219.226':139
'61.##2.21.64':139
'61.#92.88.5':139
'61.##2.16.200':139
'61.##2.232.58':139
'61.##2.206.43':139
'61.##2.163.193':139
'61.##2.197.78':139
'61.##2.78.197':139
'61.##2.219.226':445
'61.##2.35.220':445
'61.##2.137.36':445
'61.##2.226.118':445
'61.##2.112.75':445
'61.##2.203.145':445
'61.##2.119.57':445
'61.##2.197.78':445
'61.##2.232.58':445
'61.##2.21.64':445
'61.##2.163.193':445
'61.##2.165.198':445
'61.##2.242.96':445
'61.##2.206.43':445
'61.##2.123.85':139
'61.##2.114.193':445
'61.##2.76.114':445
'61.##2.196.241':139
'61.#92.9.79':139
'61.#92.30.9':139
'61.##2.242.29':139
'61.##2.208.28':445
'61.##2.85.188':445
'61.##2.113.68':445
'61.##2.180.125':445
'61.##2.53.29':445
'61.##2.254.212':445
'61.##2.42.19':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней