Trojan.DownLoader7.21543

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows Terminal Service' = '%APPDATA%\<Имя вируса>.exe'

Изменения в файловой системе:

Создает следующие файлы:

%APPDATA%\<Имя вируса>.exe

Сетевая активность:

Подключается к:

'16#.#.213.223':110
'43.##3.77.172':110
'70.#19.6.39':110
'93.##.41.156':110
'20#.#4.187.183':110
'76.##.65.228':110
'12#.#73.248.130':110
'69.##.230.254':110
'10#.#07.179.160':110
'22#.#9.70.58':110
'79.##.105.163':110
'13#.#3.217.183':110
'27.##3.119.32':110
'16.##6.110.2':110
'5.##.105.1':110
'32.##6.37.30':110
'14.##.70.233':110
'22#.#7.40.29':110
'18.##.229.129':110
'15#.#.138.218':110
'22#.#8.15.38':110
'13#.#7.64.129':110
'15#.#35.115.215':110
'11#.#90.234.56':110
'40.##2.234.146':110
'17#.#19.88.43':110
'86.##6.152.237':110
'57.##.210.39':110
'16#.#09.119.124':110
'21#.#3.234.109':110
'17#.#7.252.151':110
'19#.#4.0.107':110
'20#.#44.232.104':110
'57.#1.25.10':110
'21.##.232.115':110
'14#.#18.80.54':110
'55.#3.6.19':110
'1.##.128.177':110
'19#.4.83.40':110
'91.##1.171.64':80
'18#.168.9.1':110
'20.##3.89.10':110
'14.##.218.24':110
'16#.#3.197.185':110
'19#.#51.191.137':110
'20#.#8.42.186':110
'86.##.74.174':110
'16#.#01.119.128':110
'22#.#86.131.40':110
'19#.#10.85.244':110
'24.##7.43.53':110
'11#.#1.151.184':110
'38.##4.128.111':110
'20#.#6.56.16':110
'21.##3.179.101':110
'16#.#3.130.111':110
'35.##6.33.221':110
'94.##9.43.140':110
'22#.#08.191.1':110
'65.##.226.58':110
'42.#3.38.78':110
'21.##.157.166':110
'71.#01.8.12':110
'52.#26.22.1':110
'20#.#.19.119':110
'36.##5.57.55':110
'36.##.158.26':110
'42.##7.34.25':110
'38.##0.100.113':110
'22#.#13.10.185':110
'10#.#8.69.167':110
'12.#.45.28':110
'12#.#05.72.33':110
'10#.#75.23.7':110
'29.#.146.199':110
'13#.#01.76.75':110
'21#.#8.225.116':110
'17#.#5.146.16':110
'42.##5.149.73':110
'19.##1.60.81':110
'68.#10.0.74':110
'22#.#23.28.168':110
'8.##8.64.54':110
'68.#.84.107':110
'20.##.217.173':110
'94.##3.178.185':110
'18#.#32.150.33':110
'17#.#1.125.36':110
'38.#7.23.78':110
'21#.2.85.12':110
'34.##.133.107':110
'85.##.22.155':110
'25.##5.17.131':110
'21#.#8.151.110':110
'53.##6.182.215':110
'23#.#25.77.236':110
'11#.#5.218.142':110
'11#.#1.119.34':110
'15#.#01.115.44':110
'69.#.78.138':110
'11#.#2.183.121':110
'32.##6.23.24':110
'40.##9.189.52':110
'4.##.105.4':110
'19#.#71.238.199':110
'16#.#22.75.20':110
'8.##.224.26':110
'15#.#36.140.135':110
'19#.#45.88.59':110
'53.##.251.139':110
'22#.#.236.203':110
'34.#1.222.4':110
'16#.#2.78.70':110
'17#.#70.188.212':110
'14#.#.93.155':110
'33.##7.69.79':110
'55.##.44.165':110
'16.#.227.45':110
'13#.#56.73.207':110
'18#.#9.189.40':110
'20#.#6.10.70':110
'47.##4.231.217':110
'12#.#4.154.199':110
'53.##.161.119':110
'16#.#1.217.5':110
'26.#6.49.30':110
'59.##.227.27':110
'54.##1.254.26':110
'10#.#01.34.32':110
'26.##2.218.102':110
'19.##3.127.8':110
'17#.#.134.91':110
'50.##8.50.235':110
'63.##1.175.234':110
'6.##8.80.6':110
'11#.#.154.184':110
'15#.#14.171.36':110
'62.##3.8.183':110
'32.##.34.221':110
'49.##.215.205':110
'22#.#8.152.31':110
'22#.#0.203.201':110
'17#.#7.128.161':110
'12#.4.28.66':110
'29.##0.166.151':110
'17#.#.197.84':110
'59.##.129.129':110
'20.##.23.241':110
'31.#6.79.46':110
'21#.#7.252.185':110
'14#.#19.15.60':110
'12#.#3.253.53':110
'18#.#9.107.141':110
'66.##6.60.43':110
'2.###.156.28':110
'51.##.102.96':110
'2.###.152.185':110
'25.##.201.168':110
'11#.#23.19.72':110
'15#.#8.152.161':110
'28.##2.248.35':110
'11#.#8.138.48':110
'14#.#26.93.25':110
'26.##3.184.43':110
'90.##.92.188':110
'19#.#12.244.28':110
'7.###.36.214':110
'19#.#96.126.49':110
'6.##3.6.227':110
'44.##.86.151':110
'19#.#14.55.92':110
'17#.#53.140.205':110
'13#.#48.6.198':110
'30.#.71.140':110
'65.##.45.157':110
'15#.#8.78.36':110
'64.##5.226.89':110
'69.##2.198.30':110
'18#.#2.31.174':110
'18#.#06.100.39':110
'20#.#15.7.41':110
'20.##.230.113':110
'57.#12.59.6':110
'11#.#43.66.62':110
'13.##6.58.204':110
'9.##.111.26':110
'17#.#87.245.169':110
'85.##.209.229':110
'13#.#9.60.196':110
'12.##9.36.38':110
'73.##6.149.230':110
'46.##.199.115':110
'22#.#0.179.132':110
'73.##0.183.75':110
'15#.#3.105.33':110
'17#.#1.1.166':110
'99.##0.31.166':110
'15#.#95.116.46':110
'19.#4.30.9':110
'16#.#07.239.98':110
'34.##2.236.58':110
'14#.#43.106.201':110
'48.#2.85.62':110
'14#.#38.89.12':110
'15#.#06.96.137':110
'70.#.224.28':110
'21#.#44.246.97':110
'88.##.106.128':110
'53.#.147.9':110
'17#.#31.146.37':110
'56.##6.91.218':110
'16#.#48.198.125':110
'24.##.131.52':110
'17.#8.9.40':110
'13#.#5.251.59':110
'15.##5.165.50':110
'19#.#19.29.97':110
'9.##5.45.80':110
'15#.0.41.1':110
'19#.#8.28.24':110
'29.##0.236.3':110
'16#.#28.48.79':110
'10#.#3.84.43':110
'79.##.115.81':110
'60.##.20.178':110
'21#.#3.131.226':110
'16#.#39.93.164':110
'22.##.49.135':110
'22#.#50.14.58':110
'15#.#52.53.205':110
'23.##5.126.248':110
'22#.#8.81.14':110
'89.##0.9.112':110
'95.##.246.131':110
'45.##5.178.164':110
'19#.#35.30.23':110
'19#.#7.57.169':110
'83.##9.43.89':110
'12#.#1.171.248':110
'62.##5.29.42':110
'16#.#43.132.191':110
'2.##8.42.10':110
'21#.#1.7.211':110
'13.#.19.108':110
'13#.#20.15.240':110
'14.##5.11.105':110
'12#.1.4.61':110
'49.##7.135.108':110
'18#.#00.79.143':110
'15#.#2.210.34':110
'14#.#43.102.219':110
'70.##.200.107':110
'11#.#4.86.113':110
'11#.#17.137.96':110
'79.##.167.31':110
'37.##.132.33':110
'40.##.83.101':110
'14#.#20.26.61':110
'7.#.21.40':110
'35.##8.45.245':110
'15#.#8.45.147':110
'65.#0.19.52':110
'74.##6.20.235':110
'14.#36.3.22':110
'12#.#9.41.219':110
'92.##.98.189':110
'82.##6.236.33':110
'12.##3.70.55':110
'60.#18.4.36':110
'10#.#40.173.53':110
'9.##.93.101':110
'17.##.194.22':110
'71.##4.76.34':110
'13.#0.19.84':110
'32.##1.110.40':110
'43.##8.67.42':110
'5.###.131.23':110
'5.##.88.136':110
'52.#8.37.54':110
'24.##.15.217':110
'22.#57.2.61':110
'72.##2.52.81':110
'20#.#36.254.14':110
'22#.#5.121.2':110
'29.#.38.164':110
'22.##.106.131':110
'20#.#94.222.12':110
'18.##1.16.79':110
'13#.#11.105.196':110
'21#.#7.167.37':110
'46.##8.9.107':110
'10#.#15.134.61':110
'12#.#09.141.218':110
'6.###.218.131':110
'21.#.165.45':110
'11.##.129.114':110
'15.##.196.243':110
'9.##.24.146':110
'10#.#5.221.41':110
'13#.#12.209.233':110
'26.##2.167.40':110
'11#.#7.38.29':110
'87.##2.155.124':110
'42.##3.84.104':110
'16#.#8.104.30':110
'40.##.173.228':110
'1.#.210.246':110
'15.##.230.162':110
'31.##.43.184':110
'40.##0.139.89':110
'25.##8.26.29':110
'71.##.216.44':110
'19#.#4.99.232':110
'15#.#48.6.49':110
'20#.#44.158.179':110
'14#.#99.22.22':110
'42.##.35.240':110
'43.##.130.82':110
'19#.#2.250.35':110
'14#.#44.44.189':110
'12#.#05.13.163':110
'10#.#5.252.5':110
'22#.#3.227.23':110
'11#.#.85.154':110
'13#.#3.96.210':110
'22#.#44.49.9':110
'10#.#61.216.123':110
'12.##.130.155':110
'46.#1.13.21':110
'13#.4.39.77':110
'1.##.33.149':110
'8.###.240.21':110
'13.#.31.3':110
'3.###.18.203':110
'11#.#57.152.244':110
'11#.#7.234.36':110
'67.#11.9.16':110
'20#.#08.53.158':110
'59.##.160.11':110
'15#.#6.248.37':110
'94.##8.19.161':110
'94.##1.232.140':110
'27.##0.168.1':110
'58.#.171.75':110
'12#.#19.217.121':110
'11#.2.254.9':110
'21#.#7.149.93':110
'33.##.46.225':110
'10#.#0.60.172':110
'15#.#23.215.97':110
'10#.#1.22.42':110
'36.##9.40.252':110
'2.###.177.31':110
'16.##8.35.174':110
'96.##0.238.90':110
'17#.#82.61.14':110
'22#.#12.174.68':110
'52.##8.174.60':110
'11.##.177.45':110
'5.##.139.21':110
'12#.#2.50.169':110
'5.##.234.186':110
'10.##5.22.234':110
'44.#16.3.49':110

TCP:

Запросы HTTP GET:

91.##1.171.64/z.php?er##############

Другое:

Ищет следующие окна:

ClassName: 'Indicator' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней