Trojan.DownLoader30.28405

Техническая информация

Для обеспечения автозапуска и распространения

Создает или изменяет следующие файлы

%APPDATA%\microsoft\windows\start menu\programs\startup\svchostsw.exe

Изменения в файловой системе

Создает следующие файлы

%TEMP%\s.bat
%TEMP%\<Имя файла>.exe.pid

Сетевая активность

Подключается к

'co#####xunderwear.shop':80

TCP

Запросы HTTP GET

http://17#.##1.14.125:8888/bots/knock?wo######################################
http://co###ob-shop.de/[asdomain]2019.zip
http://co######tasonlineshop.com/[asdomain]2019.zip
http://co#####lignashop.com/[asdomain]2019.zip
http://co####de-shop.de/[asdomain]2019.zip
http://co####orkshop.es/[asdomain]2019.zip
http://co####ledcarry.shop/[asdomain]2019.zip
http://co##ex.shop/[asdomain]2019.zip
http://co####lershop.com/[asdomain]2019.zip
http://co###leshop.com/[asdomain]2019.zip
http://co###o-shop.com/[asdomain]2019.zip
http://co###pcion.shop/[asdomain]2019.zip
http://co#####rated-shops.com/[asdomain]2019.zip
http://co###shop.de/missing.html
http://co######bau-partner.shop/[asdomain]2019.zip
http://co##shop.de/[asdomain]2019.zip
http://co######arshipworkshop.com/[asdomain]2019.zip
http://co###istas.shop/[asdomain]2019.zip
http://co###c-shop.de/[asdomain]2019.zip
http://co####orkshop.com/[asdomain]2019.zip
http://co###ex.shop/[asdomain]2019.zip
http://co###reshop.com/[asdomain]2019.zip
http://co#####usculashop.com/[asdomain]2019.zip
http://co###yco.shop/[asdomain]2019.zip
http://co###ndas.shop/[asdomain]2019.zip
http://co###ll.shop/[asdomain]2019.zip
http://co###pt-shop.de/[asdomain]2019.zip
http://co###op24.com/[asdomain]2019.zip
http://co####mashop.com/[asdomain]2019.zip
http://co###xia.com/[asdomain]2019.zip
http://co###cshop.com/[asdomain]2019.zip
http://co###rkshop.com/[asdomain]2019.zip
http://co#####fsoccershop.com/[asdomain]2019.zip
http://co##hop.eu/[asdomain]2019.zip
http://co###orkshop.ru/[asdomain]2019.zip
http://co####tyshop.com/[asdomain]2019.zip
http://co###neshop.com/[asdomain]2019.zip
http://co####app-shop.com/[asdomain]2019.zip
http://co####tishop.co.uk/[asdomain]2019.zip
http://co###net.shop/[asdomain]2019.zip
http://co###tashop.ru/[asdomain]2019.zip
http://co#####istanbul.shop/[asdomain]2019.zip
http://co####ti-shop.com/[asdomain]2019.zip
http://co####ti-chick.shop/[asdomain]2019.zip
http://co######esignworkshop.com/[asdomain]2019.zip
http://co####ti-shop.de/[asdomain]2019.zip
http://co####t-rail.shop/[asdomain]2019.zip
http://www.co##ol.ag/add-ons/%5basdomain%5d2019.zip
http://co####ti-world.com/[asdomain]2019.zip
http://www.co####mashop.com/[asdomain]2019.zip
http://co####tichic.shop/[asdomain]2019.zip
http://co###tti.shop/[asdomain]2019.zip
http://co####tishop.com/[asdomain]2019.zip
http://co####tcom-shop.fr/[asdomain]2019.zip
http://co#####bikeshop.com.br/[asdomain]2019.zip
http://co######arkengetraenke.shop/[asdomain]2019.zip
http://co#####home-shop.com/[asdomain]2019.zip
http://co####e-design.com/[asdomain]2019.zip
http://co###onic.shop/asdomain2019.zip
http://co########rkengetraenke-shop.com/[asdomain]2019.zip
http://co###opping.vn/[asdomain]2019.zip
http://co####t-coach.shop/[asdomain]2019.zip
http://P6#####8.profiseller.de/[asdomain]2019.zip
http://co####t-rails.shop/[asdomain]2019.zip
http://co#####-beaute-shop.com/[asdomain]2019.zip
http://co####lmentshop.com/[asdomain]2019.zip
http://co###icare.shop/[asdomain]2019.zip
http://www.co###rld.shop/%5basdomain%5d2019.zip
http://co###al.shop/[asdomain]2019.zip
http://co###nt.shop/[asdomain]2019.zip
http://co####tbrands.shop/[asdomain]2019.zip
http://co###teshop.es/
http://www.co###ise.biz/%5basdomain%5d2019.zip
http://co#####brandshop.com/[asdomain]2019.zip
http://co#######arkengetraenke.shop/[asdomain]2019.zip
http://www.co###op24.at/
http://co####ti-world.se/[asdomain]2019.zip
http://co###ello.shop/[asdomain]2019.zip
http://co###ise.shop/[asdomain]2019.zip
http://co##hop.no/[asdomain]2019.zip
http://co###toshop.com/[asdomain]2019.zip
http://co##hop.bg/[asdomain]2019.zip
http://co##hop.tv/[asdomain]2019.zip
http://co##hop.ru/[asdomain]2019.zip
http://co###op.com.pt/[asdomain]2019.zip
http://co###cshop.eu/[asdomain]2019.zip
http://co###op2000.com/[asdomain]2019.zip
http://co###opko.com/[asdomain]2019.zip
http://co###rld.shop/[asdomain]2019.zip
http://co###opify.com/[asdomain]2019.zip
http://co###op.info/[asdomain]2019.zip
http://co####pdev.co.uk/[asdomain]2019.zip
http://co###op24.at/[asdomain]2019.zip
http://co###op.co.uk/[asdomain]2019.zip
http://co##hop.net/[asdomain]2019.zip
http://co#####-schwarmstedt.de/[asdomain]2019.zip
http://co##hop.at/[asdomain]2019.zip
http://co####odoshop.com/[asdomain]2019.zip
http://17#.##1.14.125:8888/bots/chkVersion?cu####################
http://17#.##1.14.125:8888/gw?wo#####################
http://17#.##1.14.125:8888/gw?wo#####
http://co####ingshop.com/[asdomain]2019.zip
http://co#####ngworkshop.org/[asdomain]2019.zip
http://co###shop.de/[asdomain]2019.zip
http://co###shop.com/[asdomain]2019.zip
http://co###op24.eu/[asdomain]2019.zip
http://co###-shop.de/[asdomain]2019.zip
http://co#####sbarbershop.com/[asdomain]2019.zip
http://co###op-24.net/[asdomain]2019.zip
http://co###cshop.net/[asdomain]2019.zip
http://co####p-kerski.de/[asdomain]2019.zip
http://co#####-schneider.de/[asdomain]2019.zip
http://co####p-online.de/[asdomain]2019.zip
http://17#.##1.14.125:8888/project/active
http://co###cshop.info/[asdomain]2019.zip
http://co##ar.shop/[asdomain]2019.zip
http://co###hop.com/[asdomain]2019.zip
http://co###oppen.com/[asdomain]2019.zip
http://co####shop24.net/[asdomain]2019.zip
http://co###cshop24.de/[asdomain]2019.zip
http://co#####st-workshop.com/[asdomain]2019.zip
http://co###leshop.de/[asdomain]2019.zip
http://co####ronic-shop.de/[asdomain]2019.zip
http://co####istshop.com/[asdomain]2019.zip
http://co###opper.com/[asdomain]2019.zip
http://co###l-shop.ru/[asdomain]2019.zip
http://co####de4you.shop/[asdomain]2019.zip
http://co####pping.co.kr/[asdomain]2019.zip
http://co###ade.shop/[asdomain]2019.zip
http://co###onic.shop/[asdomain]2019.zip
http://co###kkshop.de/[asdomain]2019.zip
http://co###i-shop.de/[asdomain]2019.zip
http://co###c-shop.sk/[asdomain]2019.zip
http://co###cshop.de/[asdomain]2019.zip
http://co##hop.com/[asdomain]2019.zip
http://co###topia.shop/[asdomain]2019.zip
http://co###teshop.com/[asdomain]2019.zip
http://co##hop.us/[asdomain]2019.zip
http://co####ptest.co.uk/[asdomain]2019.zip
http://co#####support.co.uk/[asdomain]2019.zip
http://co###l-shop.de/[asdomain]2019.zip
http://co###opco.com/[asdomain]2019.zip
http://co###opping.com/[asdomain]2019.zip
http://co##rt.shop/[asdomain]2019.zip
http://co###shop.eu/[asdomain]2019.zip
http://co###op.co.jp/[asdomain]2019.zip
http://co###opmall.com/[asdomain]2019.zip
http://co###oppin.com/[asdomain]2019.zip
http://co####pplaywin.com/[asdomain]2019.zip
http://co####oy-shop.ru/[asdomain]2019.zip
http://co###ops.com/[asdomain]2019.zip
http://co####-webshop.de/[asdomain]2019.zip
http://co####ponline.net/[asdomain]2019.zip
http://co####ponline.com/[asdomain]2019.zip
http://co###ttishop.de/[asdomain]2019.zip

UDP

DNS ASK co####ingshop.com
DNS ASK co###teshop.es
DNS ASK co#####brandshop.com
DNS ASK co####tbrands.shop
DNS ASK co####tbox-shop.fr
DNS ASK co#####boardshop.com
DNS ASK co#####bikeshop.com.br
DNS ASK co###pt11.shop
DNS ASK co#####artworkshops.com
DNS ASK co######rtworkshops.co.uk
DNS ASK co######rtworkshop.co.uk
DNS ASK co####tartshop.com
DNS ASK co###pta.shop
DNS ASK co####ta-shop.de
DNS ASK co######rudergerateshop.de
DNS ASK co#####2creation.shop
DNS ASK co####t.shopping
DNS ASK co#####-workshop.com
DNS ASK co####t-wohnen.shop
DNS ASK co#####-wohnen-shop.de
DNS ASK co####t-webshop.com
DNS ASK co####t-souk.shop
DNS ASK co#######nsofashopaholic.net
DNS ASK co###pt-shop.ru
DNS ASK co####t-shop.net
DNS ASK co#####closetshop.com
DNS ASK co###ise.biz
DNS ASK co######arkengetraenke.shop
DNS ASK co###.#undenwebshop.de
DNS ASK co####tkiosk.shop
DNS ASK co#####istanbul.shop
DNS ASK co####tionshop.com
DNS ASK co#####home-shop.com
DNS ASK co#####gruppe-shop.com
DNS ASK co#####gastro-shop.de
DNS ASK co######ashionwebshop.be
DNS ASK co###pteshop.uk
DNS ASK co####teshop.co.uk
DNS ASK co######esignworkshops.com
DNS ASK co######esignworkshop.com
DNS ASK co####tcrate.shop
DNS ASK co####tcraft.shop
DNS ASK co###r-shop.de
DNS ASK co######ontinuumshop.com
DNS ASK mo########modum-as.business.site
DNS ASK co#####concrete.shop
DNS ASK co####tcom-shop.fr
DNS ASK co#####chromosome.shop
DNS ASK co###ob-shop.de
DNS ASK co######ar-stuttgart.shop
DNS ASK co#####edclothing.shop
DNS ASK co###alshop.com
DNS ASK co######entfurniture.shop
DNS ASK co####lershop.com
DNS ASK co###aler.shop
DNS ASK co###ryshop.com
DNS ASK co####de-shop.de
DNS ASK co#####edcarryshop.com
DNS ASK co######dcarrypurses.shop
DNS ASK co###op24.com
DNS ASK co######tasonlineshop.com
DNS ASK co####app-shop.com
DNS ASK co######dcarrypurse.shop
DNS ASK co####yshopping.com
DNS ASK co#####pizzashop.com
DNS ASK co#####burgershop.com
DNS ASK co##ir.shop
DNS ASK co##.shop
DNS ASK co##shop.de
DNS ASK co#.shop
DNS ASK co###aycon.shop
DNS ASK co####ledcarry.shop
DNS ASK co##ol.ag
DNS ASK co##ri.de
DNS ASK co###pt-shop.eu
DNS ASK co###nt.shop
DNS ASK co#####withkaila.shop
DNS ASK P6#####8.profiseller.de
DNS ASK co###pt-shop.de
DNS ASK co####t-rails.shop
DNS ASK co####t-rail.shop
DNS ASK co####t-mode.shop
DNS ASK co#######arkengetraenke.shop
DNS ASK co########rkengetraenke-shop.com
DNS ASK co#####-gruppe-shop.com
DNS ASK co####t-coach.shop
DNS ASK co#####-beaute-shop.com
DNS ASK co######bau-partner.shop
DNS ASK co###pt-43.shop
DNS ASK co####trashop.com
DNS ASK co####lmentshop.com
DNS ASK co###pcion.shop
DNS ASK co#######tionconcealment.shop
DNS ASK co####tration.shop
DNS ASK co####trateshop.com
DNS ASK co######atedsoapshop.com
DNS ASK co#####rated-shops.com
DNS ASK co###ito.shop
DNS ASK co###al.shop
DNS ASK co#####ionsworkshop.com
DNS ASK co###ttishop.de
DNS ASK co###do.shop
DNS ASK co####enzeshop.com
DNS ASK co#####ntshopping.com
DNS ASK co#####ntshopper.com
DNS ASK co####entshop.com
DNS ASK co#####ntlifeshop.com
DNS ASK co#####ntialshopper.com
DNS ASK co#####ntialshop.com
DNS ASK co#####ntialrush.shop
DNS ASK ww#.###shopplaywin.com
DNS ASK ww##.####cholarshipworkshop.com
DNS ASK co#######forshopping.computer
DNS ASK co######tforshopping.com
DNS ASK co#######expectationshop.com
DNS ASK co#######actionworkshops.com
DNS ASK ww#.##mshopko.com
DNS ASK co###dent.shop
DNS ASK co#######eworkshopslondon.com
DNS ASK co#####nceworkshops.com
DNS ASK co####enceshop.org
DNS ASK co####enceshop.com
DNS ASK co######ceinshopping.co.uk
DNS ASK co######ceinshopping.com
DNS ASK co###gshop.nl
DNS ASK co###ne.shop
DNS ASK co########otographyworkshops.com
DNS ASK co#######anagementworkshops.com
DNS ASK co###ict.shop
DNS ASK co###tures.shop
DNS ASK co###ture.shop
DNS ASK co#####xunderwear.shop
DNS ASK co###tex.shop
DNS ASK co####erieshop.de
DNS ASK co####erie-shop.ch
DNS ASK co####erie-bauer.de
DNS ASK co####medshop.com
DNS ASK co###leshop.de
DNS ASK co###rmed.shop
DNS ASK co####med-user.shop
DNS ASK co#####ed-infos.shop
DNS ASK co#####ationshop.com
DNS ASK co#######iongiftshopping.com
DNS ASK co####m-user.shop
DNS ASK eb###tores.de
DNS ASK co#####-myshopify.com
DNS ASK co####m-login.shop
DNS ASK co#####-account.shop
DNS ASK co####ti-chick.shop
DNS ASK co###tashop.ru
DNS ASK co######cebarbershop.com
DNS ASK co######cecoffeeshop.com
DNS ASK co####tishop.co.uk
DNS ASK co###ttishop.be
DNS ASK co#####ishooters.shop
DNS ASK co###ttis.shop
DNS ASK co#####ipartyshop.com
DNS ASK co######monogramshop.com
DNS ASK co#####iclubshop.com
DNS ASK co#####iclubshop.co.uk
DNS ASK co####tichic.shop
DNS ASK co######cakesbakeshop.com
DNS ASK DN##ore.com
DNS ASK co#####iballoonshop.com
DNS ASK co#######ndsparklepartyshop.com
DNS ASK do####renter.com
DNS ASK co###tti.shop
DNS ASK co####ti-world.se
DNS ASK co####ti-world.com
DNS ASK co####ti-shop.eu
DNS ASK co####ti-shop.de
DNS ASK co####ti-shop.com
DNS ASK co####tishop.com
DNS ASK co####encecuts.shop
DNS ASK co###ttishop.eu
DNS ASK co####tishop.net
DNS ASK co###ttishop.nl
DNS ASK co###dence.shop
DNS ASK co######ce-workshop.co.uk
DNS ASK co###dant.shop
DNS ASK co###can.shop
DNS ASK co####nzawebshop.es
DNS ASK co#####zawebshop.com
DNS ASK co####nceshop.com
DNS ASK co###ance.shop
DNS ASK co###able.shop
DNS ASK co#####iworkshop.com
DNS ASK co####tiwebshop.com
DNS ASK ma######ce.comtecshop24.net
DNS ASK co####tishops.com
DNS ASK co#####ishopping.com
DNS ASK df####b1.onamae.com
DNS ASK co####tishoppe.com
DNS ASK co####ledcarry.com
DNS ASK co####tishop24.eu
DNS ASK co####tishop24.com
DNS ASK co###ttishop.uk
DNS ASK co######ceautoworkshop.com
DNS ASK co###veshop.com
DNS ASK co###usto.shop
DNS ASK co###ube.shop
DNS ASK co##hop.tv
DNS ASK co##hop.ru
DNS ASK co###op.online
DNS ASK co##hop.no
DNS ASK co##hop.net
DNS ASK co###op.info
DNS ASK co##hop.in
DNS ASK co##hop.fr
DNS ASK co##hop.eu
DNS ASK co###op.com.pt
DNS ASK co##hop.com
DNS ASK co###op.co.uk
DNS ASK co##hop.biz
DNS ASK co###op.co.jp
DNS ASK co##hop.bg
DNS ASK co##hop.at
DNS ASK co#####-schwarmstedt.de
DNS ASK co#####-schneider.de
DNS ASK co####p-online.de
DNS ASK co###op-one.de
DNS ASK co##hop.xyz
DNS ASK co###op-one.com
DNS ASK co###ops.com
DNS ASK co####p-kerski.de
DNS ASK co####pplaywin.com
DNS ASK co###opping.vn
DNS ASK co###opping.com
DNS ASK co####pping.co.kr
DNS ASK co###oppin.com
DNS ASK co###opper.com
DNS ASK co###oppen.com
DNS ASK co##rt.shop
DNS ASK co###oppe.com
DNS ASK co####ponline.net
DNS ASK co####ponline.com
DNS ASK co###opone.com
DNS ASK co###opmall.com
DNS ASK co###opko.com
DNS ASK co###opify.com
DNS ASK co###opent.com
DNS ASK co####pdev.co.uk
DNS ASK co####pcom.online
DNS ASK co###opco.com
DNS ASK co###op24.eu
DNS ASK co###op24.at
DNS ASK co###op10.com
DNS ASK co###op1.com
DNS ASK co###op2000.com
DNS ASK co###op-24.net
DNS ASK co###orkshop.ru
DNS ASK co####orkshop.es
DNS ASK co####orkshop.de
DNS ASK co####orkshop.com
DNS ASK co###ty.shop
DNS ASK co###tta.shop
DNS ASK co###tshop.com
DNS ASK co#####ostcardbook.shop
DNS ASK co####ronium.shop
DNS ASK co####ronic-shop.de
DNS ASK co###toshop.com
DNS ASK co###topia.shop
DNS ASK co####odoshop.com
DNS ASK co###to.shop
DNS ASK co###tix.shop
DNS ASK co#####ngworkshop.org
DNS ASK co#####ngworkshop.net
DNS ASK co#####ngworkshop.info
DNS ASK co#####ngworkshop.biz
DNS ASK co#####ngtoolshop.com
DNS ASK co#####ngshopper.com
DNS ASK co###zone.shop
DNS ASK co#####-corporate.de
DNS ASK co###opsteal.us
DNS ASK co###xia.com
DNS ASK co####enshop.com
DNS ASK co###cshop.net
DNS ASK co###cshop.info
DNS ASK co###cshop.eu
DNS ASK co###cshop.com
DNS ASK co######arshipworkshop.com
DNS ASK co###tec.shop
DNS ASK co##at.shop
DNS ASK co###-xem.shop
DNS ASK co###-shop.de
DNS ASK co###-eth.shop
DNS ASK co###shop.com
DNS ASK co####flyshop.com
DNS ASK co##se.shop
DNS ASK co#####sbarbershop.com
DNS ASK co###de.shop
DNS ASK co####e-design.com
DNS ASK co##ad.shop
DNS ASK co###shop.eu
DNS ASK co###shop.es
DNS ASK co###shop.de
DNS ASK co####oneshop.com
DNS ASK co###eb.shop
DNS ASK co##hop.us
DNS ASK co#####support.co.uk
DNS ASK co##vi.shop
DNS ASK co####llo-shop.ru
DNS ASK co##v.shop
DNS ASK co####rshop.co.uk
DNS ASK co####rbikeshop.com
DNS ASK co####bikeshop.com
DNS ASK co###hop.top
DNS ASK co###yco.shop
DNS ASK co####tyshop.com
DNS ASK co###istas.shop
DNS ASK co####shopping.com
DNS ASK co###us.shop
DNS ASK co##to.shop
DNS ASK co###ishop.com
DNS ASK co###o-shop.com
DNS ASK co###iones.shop
DNS ASK co###ex.shop
DNS ASK co####cazione.shop
DNS ASK co###icare.shop
DNS ASK co###ica.shop
DNS ASK co####mosciano.shop
DNS ASK co###ello.shop
DNS ASK co####noshippo.com
DNS ASK co#####usculashop.com
DNS ASK co###uzu.shop
DNS ASK co###ndas.shop
DNS ASK co####a-shop.com
DNS ASK co###net.shop
DNS ASK co###hopify.com
DNS ASK co###ushop.fr
DNS ASK co###ushop.com
DNS ASK co####mashop.com
DNS ASK co##ar.shop
DNS ASK co###pshop.com
DNS ASK co#####lignashop.com
DNS ASK co###rld.shop
DNS ASK co###rkshop.com
DNS ASK co######nspastryshop.com
DNS ASK co##ip.shop
DNS ASK co#####fsoccershop.com
DNS ASK co####afshop.com
DNS ASK co##########aighttohellandcrashandburn.shop
DNS ASK co###llshop.dk
DNS ASK co###ll.shop
DNS ASK co###tashop.de
DNS ASK co###tashop.com
DNS ASK co###ta-shop.de
DNS ASK co###neshop.com
DNS ASK co###ikari.shop
DNS ASK co###amark.shop
DNS ASK co####ptest.co.uk
DNS ASK co####-webshop.de
DNS ASK co###c-shop.sk
DNS ASK co###teshop.com
DNS ASK co###c-shop.de
DNS ASK co###ctshop.com
DNS ASK co###eshop.com
DNS ASK co###reshop.com
DNS ASK co####oy-shop.ru
DNS ASK co####yminicar.shop
DNS ASK co####ydoll.shop
DNS ASK co###oydol.shop
DNS ASK co###oy.shop
DNS ASK co#####kprintshop.com
DNS ASK co######parkbodyshop.com
DNS ASK co#####kcarshops.com
DNS ASK co###ace.shop
DNS ASK co##ol.shop
DNS ASK co####-shops.org
DNS ASK co####-shops.com
DNS ASK co###l-shop.de
DNS ASK co####istshop.com
DNS ASK co#####-shopping.com
DNS ASK co#####st-workshop.com
DNS ASK co####h-shopping.de
DNS ASK co####hikari.shop
DNS ASK co###chnow.shop
DNS ASK co##fa.shop
DNS ASK co###ua.shop
DNS ASK co###onic.shop
DNS ASK co###i-shop.de
DNS ASK co###adeshop.ba
DNS ASK co####de4you.shop
DNS ASK co###ade.shop
DNS ASK co###ise.shop
DNS ASK co###is.shop
DNS ASK co####mshopping.com
DNS ASK co#######esolutionworkshops.com
DNS ASK co###leshop.com
DNS ASK co###hopx.gq
DNS ASK co###l-shop.ru
DNS ASK co###l-shop.ch
DNS ASK co###hop.com
DNS ASK co###kkshop.de
DNS ASK co####shop24.net
DNS ASK co###cshop24.de
DNS ASK co###cshop.de
DNS ASK co###chshop.com
DNS ASK co##ex.shop
DNS ASK co####ctshop.com

Другое

Создает и запускает на исполнение

'%WINDIR%\syswow64\cmd.exe' /Q /C <LS_APPDATA>\Temp/s.bat' (со скрытым окном)

Запускает на исполнение

'%WINDIR%\syswow64\cmd.exe' /Q /C <LS_APPDATA>\Temp/s.bat

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней