Trojan.DownLoader10.13219

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows Terminal Service' = '%APPDATA%\WindowsTerminal.exe'

Вредоносные функции:

Создает и запускает на исполнение:

'<Текущая директория>\WindowsTerminal.exe'

Изменения в файловой системе:

Создает следующие файлы:

%APPDATA%\WindowsTerminal.exe
<Текущая директория>\WindowsTerminal.exe

Сетевая активность:

Подключается к:

'87.##7.141.144':110
'19.#6.53.70':110
'31.#.240.222':110
'11#.#35.128.141':110
'34.#0.30.80':110
'19#.#23.13.155':110
'24.#70.12.3':110
'2.#.151.14':110
'3.###.123.44':110
'58.#3.171.0':110
'75.##4.57.141':110
'20.##2.40.216':110
'17#.#74.183.30':110
'11#.27.87.3':110
'60.##1.13.189':110
'96.##.245.60':110
'64.#.120.229':110
'21#.#08.144.136':110
'21#.#5.247.185':110
'95.##4.218.175':110
'19#.#15.47.126':110
'21#.#8.64.29':110
'21#.#07.137.108':110
'17#.#9.32.105':110
'97.#2.1.74':110
'43.##6.109.33':110
'17#.#21.119.89':110
'10#.#0.253.31':110
'13#.#.100.180':110
'38.##.226.152':110
'19#.#4.239.184':110
'38.##7.146.32':110
'14#.#0.180.4':110
'18#.#23.167.17':110
'6.###.219.165':110
'36.##6.169.125':110
'12#.#18.252.216':110
'15#.#97.27.184':110
'47.##6.50.124':110
'12#.#2.248.2':110
'79.##2.18.120':110
'22#.#34.95.42':110
'18#.#2.157.152':110
'11.##3.25.236':110
'18.##.222.23':110
'20#.#7.44.207':110
'20#.#01.65.143':110
'15#.#64.36.23':110
'92.##3.33.175':110
'24.#6.186.9':110
'11#.#50.249.98':110
'10#.#71.143.169':110
'44.#9.217.7':110
'71.##3.24.15':110
'5.##7.6.55':110
'19#.#1.62.45':110
'18#.#5.33.137':110
'16#.#1.162.39':110
'10#.#17.11.45':110
'13#.#5.174.206':110
'69.##.166.24':110
'50.#1.31.9':110
'17#.#80.146.148':110
'17#.#14.222.212':110
'71.#32.74.6':110
'20#.#87.23.48':110
'15#.#2.137.33':110
'16#.#.150.32':110
'20#.#5.129.15':110
'41.##0.20.167':110
'13#.#0.27.140':110
'12.#27.4.27':110
'38.##9.208.235':110
'22#.#9.245.90':110
'70.##7.170.122':110
'19#.#96.248.66':110
'21#.93.50.9':110
'14#.#47.4.22':110
'22#.#05.23.213':110
'74.##.25.162':110
'16#.#96.187.62':110
'20.##.161.244':110
'11#.#20.17.107':110
'17.##.97.223':110
'69.#16.6.61':110
'10#.#97.21.71':110
'10#.#7.76.37':110
'22#.#21.124.30':110
'16.##8.48.212':110
'34.##.220.26':110
'56.##6.2.236':110
'12#.#32.65.242':110
'46.##4.230.240':110
'70.##5.46.86':110
'18#.#43.116.219':110
'34.#5.2.71':110
'80.##8.77.38':110
'47.#32.30.5':110
'22.##.54.187':110
'22.#1.7.125':110
'50.#.122.214':110
'18#.#50.81.34':110
'45.##.111.24':110
'12#.#6.92.16':110
'11#.#5.158.243':110
'20#.#41.192.3':110
'54.##3.27.117':110
'51.#38.5.70':110
'29.##6.214.171':110
'30.##2.126.9':110
'14.##2.33.151':110
'20#.#9.185.242':110
'16#.#21.164.121':110
'19#.#.213.14':110
'33.##5.123.58':110
'18#.70.30.5':110
'87.##.147.199':110
'68.##.242.110':110
'47.##4.39.217':110
'15#.#6.22.177':110
'11#.#21.29.43':110
'31.##4.1.189':110
'12#.#22.61.24':110
'9.###.250.36':110
'90.##.115.76':110
'33.##.185.241':110
'47.##.144.154':110
'14#.#05.188.198':110
'91.##3.214.0':110
'94.#0.72.65':110
'19#.#3.177.144':110
'5.###.238.64':110
'72.##7.151.201':110
'1.##3.35.11':110
'19#.#56.36.242':110
'52.##7.141.44':110
'18.#0.142.8':110
'3.##0.4.21':110
'28.##5.201.160':110
'64.##2.234.94':110
'18.##5.173.21':110
'57.##6.37.105':110
'95.##.96.234':110
'10.##3.62.129':110
'48.##.247.49':110
'13#.17.3.14':110
'3.##6.29.48':110
'34.##.213.13':110
'98.##3.123.235':110
'49.#8.70.36':110
'26.#6.241.1':110
'40.##9.208.71':110
'21#.#40.25.37':110
'82.##1.142.113':110
'64.##8.38.36':110
'6.##.41.78':110
'18#.#45.250.140':110
'69.##.67.131':110
'16#.#94.55.118':110
'56.##.55.228':110
'65.##6.29.112':110
'22#.#20.32.72':110
'15.##1.220.209':110
'22#.#70.142.33':110
'13#.#5.178.225':110
'22.##5.207.34':110
'25.#.226.82':110
'13.##9.240.240':110
'23#.#34.98.102':110
'65.##1.240.68':110
'22.##8.112.8':110
'6.###.189.37':110
'55.#70.1.28':110
'12#.#05.239.42':110
'17#.62.42.9':110
'13#.#05.17.24':110
'22#.#8.150.254':110
'6.##.236.192':110
'81.##0.173.226':110
'6.##4.44.30':110
'21.##.236.58':110
'51.##4.16.191':110
'69.##2.61.225':110
'13#.#19.217.199':110
'13#.#1.118.251':110
'16#.#9.21.10':110
'12#.#6.46.229':110
'39.##7.104.1':110
'53.##8.49.32':110
'13#.#43.198.242':110
'58.##2.163.208':110
'24.##.17.201':110
'61.##2.103.154':110
'21#.#12.19.96':110
'22#.#97.186.62':110
'88.##.90.131':110
'80.#4.9.17':110
'11#.#38.203.32':110
'14#.#9.200.104':110
'91.##3.197.218':110
'47.##.71.231':110
'51.##.130.10':110
'55.##.140.101':110
'64.##7.120.49':110
'12#.#6.45.42':110
'6.##.247.221':110
'37.##2.172.158':110
'17#.#69.38.42':110
'19#.#48.143.154':110
'21#.#0.200.80':110
'12#.#91.108.129':110
'22#.#2.210.153':110
'18.#3.89.12':110
'55.##.156.138':110
'24.##.121.24':110
'86.##.146.77':110
'37.#2.15.46':110
'39.##.239.248':110
'11.#5.44.28':110
'27.#.234.86':110
'21#.#29.126.122':110
'11#.#9.85.150':110
'20#.#88.43.212':110
'20#.#45.214.133':110
'18#.#37.44.249':110
'11.##8.109.169':110
'10#.#97.219.6':110
'39.##.193.130':110
'4.##.174.232':110
'95.##.34.228':110
'40.##.60.150':110
'16.#44.15.2':110
'87.##2.83.185':110
'14#.#1.142.199':110
'3.###.200.251':110
'67.#.51.127':110
'18#.#4.167.200':110
'12#.#06.220.143':110
'52.##6.220.75':110
'48.##8.104.136':110
'13#.#63.207.81':110
'11#.#49.103.165':110
'12#.#77.21.25':110
'46.##1.230.135':110
'15#.#75.194.51':110
'11#.#.32.218':110
'20#.#8.219.178':110
'14#.#4.215.88':110
'16#.#0.7.233':110
'6.###.167.51':110
'11.##3.8.175':110
'43.##.211.33':110
'58.##6.171.248':110
'50.##7.97.215':110
'46.#93.52.1':110
'22#.#0.73.44':110
'18#.#79.216.189':110
'31.##.129.164':110
'55.##6.11.154':110
'11#.#6.11.82':110
'21#.4.75.19':110
'22#.#6.107.146':110
'90.##.24.169':110
'74.##.124.131':110
'22#.#82.80.6':110
'78.##.95.241':110
'19#.#4.22.184':110
'58.##.142.232':110
'18#.#3.227.100':110
'21#.#25.106.23':110
'30.##9.5.237':110
'3.###.224.27':110
'12#.#31.121.217':110
'14#.#78.152.134':110
'22#.#87.188.57':110
'19#.#53.44.219':110
'20.##.249.32':110
'50.##.46.187':110
'19#.#39.145.149':110
'11#.65.25.9':110
'8.##.220.38':110
'98.#23.4.11':110
'68.#0.190.7':110
'12#.#28.159.93':110
'35.#6.6.225':110
'59.##2.30.79':110
'11#.#42.229.222':110
'12#.#10.18.163':110
'28.##.178.49':110
'23.#47.6.53':110
'16#.#39.144.155':110
'15#.#76.211.243':110
'50.#1.97.12':110
'11#.#7.217.40':110
'15.##2.54.164':110
'79.#.59.75':110
'48.##.249.38':110
'19#.#89.86.19':110
'13.##6.190.51':110
'12.##7.31.238':110
'70.##.139.219':110
'85.#7.192.7':110
'12#.#1.55.73':110
'21#.#9.32.157':110
'62.#.35.28':110
'16.##6.151.20':110
'30.##1.224.24':110
'16#.#33.250.245':110
'20#.#28.106.184':110
'11.##.221.35':110
'33.##.226.197':110
'12#.#3.39.161':110
'67.#5.72.85':110
'45.##0.19.10':110
'90.##.155.235':110
'12#.#3.179.192':110
'36.##6.205.211':110
'14#.#51.129.63':110
'13#.#2.200.93':110
'39.##3.82.180':110
'14#.#6.126.20':110
'17#.#2.158.239':110
'10#.#5.133.224':110
'60.##.223.18':110
'59.##.37.131':110
'12#.#7.22.224':110
'98.#.212.241':110
'15#.#0.7.117':110
'10.##1.177.254':110
'18#.#.249.238':110
'76.#3.66.84':110
'62.##6.156.20':110
'79.##2.254.96':110
'22#.#22.107.5':110
'31.##.116.102':110
'98.#6.73.78':110
'59.##.15.149':110
'11#.#14.202.106':110
'8.###.236.40':110
'14#.#48.175.112':110
'96.##7.187.33':110
'10#.#45.142.190':110
'19.##4.122.212':110
'11#.#4.38.43':110
'13#.#.116.144':110
'65.##1.222.194':110
'11#.#0.139.56':110
'32.#49.37.1':110
'64.##8.87.153':110
'17#.#5.41.32':110
'14#.#99.221.53':110
'89.##.250.57':110
'40.##3.11.223':110
'13#.#22.16.221':110
'15#.#0.99.192':110
'11#.#1.10.37':110
'56.#0.86.39':110
'4.##.174.190':110
'68.##0.215.52':110
'79.#33.5.35':110
'14#.#.31.178':110
'15#.#55.131.92':110
'11.##.246.114':110
'10#.#6.79.105':110
'59.##.35.242':110
'30.##9.247.32':110
'16#.#9.88.74':110
'30.##5.123.64':110
'15#.#18.36.91':110
'19#.#90.103.171':110
'43.#67.8.8':110
'17#.#86.100.68':110
'18#.#1.220.194':110
'76.##.232.18':110
'15.##4.224.9':110
'10#.#37.132.25':110
'13#.#16.33.101':110
'23#.#1.238.222':110
'16#.#30.83.158':110
'19#.#4.177.28':110
'98.#5.38.51':110
'37.#1.116.6':110
'19#.#6.231.174':110
'14#.#44.25.5':110
'67.##.206.70':110
'10#.#01.199.91':110
'91.##4.136.182':110
'10#.#77.220.30':110
'20#.#48.40.98':110
'8.##.24.26':110
'68.##8.0.248':110
'34.#.103.210':110
'76.##.174.184':110
'42.#32.5.80':110
'17#.#71.109.2':110
'65.##.49.192':110
'37.##4.116.104':110
'17#.#08.9.118':110
'21#.#1.14.212':110
'11#.#45.187.64':110
'7.###.232.121':110
'19#.#9.23.114':110
'37.#6.38.18':110
'15.##9.114.229':110
'22#.#.218.171':110
'47.##7.168.42':110
'2.##.254.36':110
'12#.#37.148.78':110
'30.##1.190.27':110
'2.##.83.163':110
'9.###.53.133':110
'24.##.240.24':110
'22.##3.130.139':110
'22#.#4.84.216':110
'72.##.14.253':110
'4.###.217.109':110
'12#.#32.89.104':110
'59.##7.241.22':110
'96.##2.192.226':110
'82.##.106.161':110
'21#.#68.252.41':110
'14#.#82.97.129':110
'17#.#76.100.88':110
'16#.#46.26.127':110
'20#.31.9.65':110
'18#.#05.246.220':110
'20#.#.250.107':110
'18#.#50.35.2':110
'5.###.92.196':110
'18#.#15.13.181':110
'10#.33.7.60':110
'16#.#9.195.116':110
'19#.#93.127.75':110
'8.###.192.80':110
'18#.#95.24.221':110
'55.##.106.134':110
'42.##5.137.42':110
'10#.#12.49.219':110
'70.##.10.173':110
'24.#2.2.110':110
'91.##1.171.64':80
'21#.#10.117.199':110
'17#.#45.73.42':110
'15#.18.18.7':110
'36.##0.115.168':110
'64.##7.48.134':110
'20#.#86.9.56':110
'12#.#73.21.60':110
'15.##.191.42':110
'16#.#05.254.29':110
'22#.#6.155.206':110
'17#.8.8.226':110
'22#.#53.96.19':110
'18#.#37.199.64':110
'13#.#54.174.32':110
'3.###.214.32':110
'37.##.50.175':110
'21#.#33.253.76':110
'67.##.125.220':110
'74.##2.100.164':110
'14#.#20.225.218':110
'21#.#0.240.16':110
'22#.#75.249.104':110
'47.#79.3.14':110
'64.#4.49.19':110
'10#.#1.155.42':110
'64.#2.16.38':110
'91.##6.134.161':110
'1.##.172.15':110
'66.##.171.32':110
'78.#6.62.16':110
'19#.#87.100.210':110
'18#.#4.155.73':110
'70.#.81.36':110
'16#.#82.171.206':110
'26.##.15.116':110
'76.##.22.201':110
'11#.#2.27.154':110
'7.###.28.120':110
'8.###.204.24':110
'18#.#2.130.154':110
'13#.#08.31.31':110
'20#.#24.136.36':110
'20#.#1.100.100':110
'21.##3.21.22':110
'14#.#08.8.125':110
'14#.#43.33.157':110
'18#.#80.253.5':110
'3.##.106.149':110
'13.##7.54.94':110
'11#.#.125.84':110
'14#.#5.23.209':110
'70.##3.237.158':110
'14.##8.21.44':110
'10#.#0.124.237':110
'72.##.123.174':110
'67.#.41.216':110
'96.##1.246.21':110
'16#.#7.131.131':110
'18#.#17.177.233':110
'47.#0.24.82':110
'64.##5.13.90':110
'25.##6.153.222':110
'12.##1.216.5':110
'76.##.160.99':110
'21#.#00.102.85':110
'22.##.110.229':110
'21#.#16.171.22':110
'18#.#38.13.21':110
'31.##5.113.150':110
'40.##9.21.22':110
'70.##0.147.198':110
'12#.#1.18.25':110
'20#.#4.37.242':110
'47.##6.29.126':110
'19#.#7.179.99':110
'11#.#96.223.67':110
'21#.#74.11.233':110
'41.##3.145.173':110
'10#.#7.216.207':110
'22#.#14.59.39':110
'52.##.25.226':110
'35.#3.0.99':110
'66.##.195.227':110
'16#.#55.30.101':110
'40.#5.34.71':110

TCP:

Запросы HTTP GET:

91.##1.171.64/z.php?er##############

Другое:

Ищет следующие окна:

ClassName: 'Indicator' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней