Trojan.DownLoader9.54863

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Audio Emulator' = '%APPDATA%\AudioEmulatorSync.exe'

Изменения в файловой системе:

Создает следующие файлы:

%APPDATA%\AudioEmulatorSync.exe

Сетевая активность:

Подключается к:

'0.#.1.251':110
'0.#.1.246':110
'0.#.1.250':110
'0.#.1.249':110
'0.#.1.255':110
'0.#.1.248':110
'0.#.1.243':110
'0.#.1.241':110
'0.#.1.244':110
'0.#.1.245':110
'0.#.1.247':110
'0.#.1.252':110
'0.#.2.6':110
'0.#.2.4':110
'0.#.2.5':110
'0.#.2.9':110
'0.#.2.8':110
'0.#.2.0':110
'0.#.1.254':110
'0.#.1.253':110
'0.#.2.1':110
'0.#.2.3':110
'0.#.2.2':110
'0.#.1.240':110
'0.#.1.228':110
'0.#.1.226':110
'0.#.1.227':110
'0.#.1.225':110
'0.#.1.224':110
'0.#.1.222':110
'0.#.1.216':110
'0.#.1.218':110
'0.#.1.221':110
'0.#.1.223':110
'0.#.1.219':110
'0.#.1.230':110
'0.#.1.237':110
'0.#.1.236':110
'0.#.1.238':110
'0.#.1.242':110
'0.#.1.239':110
'0.#.1.235':110
'0.#.1.231':110
'0.#.1.229':110
'0.#.1.233':110
'0.#.1.232':110
'0.#.1.234':110
'0.#.2.45':110
'0.#.2.36':110
'0.#.2.44':110
'0.#.2.47':110
'0.#.2.46':110
'0.#.2.43':110
'0.#.2.35':110
'0.#.2.28':110
'0.#.2.38':110
'0.#.2.42':110
'0.#.2.37':110
'0.#.2.39':110
'0.#.2.53':110
'0.#.2.49':110
'0.#.2.52':110
'0.#.2.54':110
'0.#.2.55':110
'0.#.2.51':110
'0.#.2.40':110
'0.#.2.48':110
'0.#.2.41':110
'0.#.2.32':110
'0.#.2.50':110
'0.#.2.33':110
'0.#.2.14':110
'0.#.2.16':110
'0.#.2.15':110
'0.#.2.18':110
'0.#.2.17':110
'0.#.2.19':110
'0.#.2.10':110
'0.#.2.12':110
'0.#.2.7':110
'0.#.2.13':110
'0.#.2.11':110
'0.#.2.20':110
'0.#.2.30':110
'0.#.2.31':110
'0.#.2.24':110
'0.#.2.34':110
'0.#.2.29':110
'0.#.2.26':110
'0.#.2.23':110
'0.#.2.22':110
'0.#.2.21':110
'0.#.2.27':110
'0.#.2.25':110
'0.#.1.209':110
'0.#.1.152':110
'0.#.1.154':110
'0.#.1.155':110
'0.#.1.158':110
'0.#.1.157':110
'0.#.1.153':110
'0.#.1.150':110
'0.#.1.148':110
'0.#.1.149':110
'0.#.1.151':110
'0.#.1.144':110
'0.#.1.156':110
'0.#.1.169':110
'0.#.1.164':110
'0.#.1.167':110
'0.#.1.170':110
'0.#.1.165':110
'0.#.1.168':110
'0.#.1.161':110
'0.#.1.160':110
'0.#.1.163':110
'0.#.1.162':110
'0.#.1.159':110
'0.#.1.146':110
'0.#.1.130':110
'0.#.1.128':110
'0.#.1.131':110
'0.#.1.135':110
'0.#.1.134':110
'0.#.1.129':110
'0.#.1.123':110
'0.#.1.125':110
'0.#.1.127':110
'0.#.1.126':110
'0.#.1.124':110
'0.#.1.133':110
'0.#.1.145':110
'0.#.1.141':110
'0.#.1.147':110
'0.#.1.142':110
'0.#.1.143':110
'0.#.1.136':110
'0.#.1.140':110
'0.#.1.132':110
'0.#.1.139':110
'0.#.1.137':110
'0.#.1.138':110
'0.#.1.199':110
'0.#.1.201':110
'0.#.1.203':110
'0.#.1.208':110
'0.#.1.206':110
'0.#.1.198':110
'0.#.1.196':110
'0.#.1.192':110
'0.#.1.195':110
'0.#.1.200':110
'0.#.1.197':110
'0.#.1.204':110
'0.#.1.215':110
'0.#.1.217':110
'0.#.1.214':110
'0.#.1.220':110
'0.#.1.205':110
'0.#.1.212':110
'0.#.1.202':110
'0.#.1.207':110
'0.#.1.210':110
'0.#.1.213':110
'0.#.1.211':110
'0.#.1.194':110
'0.#.1.171':110
'0.#.1.176':110
'0.#.1.178':110
'0.#.1.181':110
'0.#.1.182':110
'0.#.1.175':110
'0.#.1.173':110
'0.#.1.172':110
'0.#.1.174':110
'0.#.1.177':110
'0.#.1.166':110
'0.#.1.179':110
'0.#.1.189':110
'0.#.1.187':110
'0.#.1.191':110
'0.#.1.193':110
'0.#.1.190':110
'0.#.1.188':110
'0.#.1.183':110
'0.#.1.184':110
'0.#.1.185':110
'0.#.1.186':110
'0.#.1.180':110
'0.#.2.184':110
'0.#.2.181':110
'0.#.2.183':110
'0.#.2.187':110
'0.#.2.182':110
'0.#.2.180':110
'0.#.2.176':110
'0.#.2.175':110
'0.#.2.177':110
'0.#.2.179':110
'0.#.2.178':110
'0.#.2.186':110
'0.#.2.192':110
'0.#.2.195':110
'0.#.2.196':110
'0.#.2.190':110
'0.#.2.197':110
'0.#.2.193':110
'0.#.2.188':110
'0.#.2.185':110
'0.#.2.191':110
'0.#.2.194':110
'0.#.2.189':110
'0.#.2.173':110
'0.#.2.160':110
'0.#.2.159':110
'0.#.2.149':110
'0.#.2.161':110
'0.#.2.152':110
'0.#.2.157':110
'0.#.2.156':110
'0.#.2.148':110
'0.#.2.155':110
'0.#.2.158':110
'0.#.2.151':110
'0.#.2.162':110
'0.#.2.172':110
'0.#.2.171':110
'0.#.2.168':110
'0.#.2.174':110
'0.#.2.170':110
'0.#.2.169':110
'0.#.2.163':110
'0.#.2.164':110
'0.#.2.165':110
'0.#.2.167':110
'0.#.2.166':110
'0.#.2.231':110
'0.#.2.233':110
'0.#.2.230':110
'0.#.2.235':110
'0.#.2.232':110
'0.#.2.229':110
'0.#.2.225':110
'0.#.2.222':110
'0.#.2.223':110
'0.#.2.228':110
'0.#.2.227':110
'0.#.2.224':110
'0.#.2.234':110
'0.#.2.240':110
'0.#.2.243':110
'0.#.2.242':110
'0.#.2.244':110
'0.#.2.241':110
'0.#.2.226':110
'0.#.2.237':110
'0.#.2.236':110
'0.#.2.238':110
'0.#.2.239':110
'0.#.2.221':110
'0.#.2.198':110
'0.#.2.207':110
'0.#.2.208':110
'0.#.2.210':110
'0.#.2.209':110
'0.#.2.205':110
'0.#.2.200':110
'0.#.2.199':110
'0.#.2.203':110
'0.#.2.202':110
'0.#.2.201':110
'0.#.2.206':110
'0.#.2.218':110
'0.#.2.216':110
'0.#.2.217':110
'0.#.2.220':110
'0.#.2.219':110
'0.#.2.215':110
'0.#.2.212':110
'0.#.2.204':110
'0.#.2.211':110
'0.#.2.214':110
'0.#.2.213':110
'0.#.2.150':110
'0.#.2.87':110
'0.#.2.88':110
'0.#.2.86':110
'0.#.2.89':110
'0.#.2.90':110
'0.#.2.85':110
'0.#.2.82':110
'0.#.2.81':110
'0.#.2.80':110
'0.#.2.84':110
'0.#.2.83':110
'0.#.2.92':110
'0.#.2.101':110
'0.#.2.102':110
'0.#.2.98':110
'0.#.2.103':110
'0.#.2.104':110
'0.#.2.97':110
'0.#.2.93':110
'0.#.2.91':110
'0.#.2.94':110
'0.#.2.96':110
'0.#.2.95':110
'0.#.2.79':110
'0.#.2.62':110
'0.#.2.61':110
'0.#.2.64':110
'0.#.2.66':110
'0.#.2.65':110
'0.#.2.63':110
'0.#.2.56':110
'0.#.2.58':110
'0.#.2.59':110
'0.#.2.60':110
'0.#.2.57':110
'0.#.2.69':110
'0.#.2.75':110
'0.#.2.74':110
'0.#.2.76':110
'0.#.2.78':110
'0.#.2.77':110
'0.#.2.73':110
'0.#.2.71':110
'0.#.2.67':110
'0.#.2.70':110
'0.#.2.68':110
'0.#.2.72':110
'0.#.2.133':110
'0.#.2.129':110
'0.#.2.125':110
'0.#.2.138':110
'0.#.2.135':110
'0.#.2.131':110
'0.#.2.132':110
'0.#.2.130':110
'0.#.2.127':110
'0.#.2.136':110
'0.#.2.137':110
'0.#.2.139':110
'0.#.2.134':110
'0.#.2.146':110
'0.#.2.147':110
'0.#.2.154':110
'0.#.2.153':110
'0.#.2.145':110
'0.#.2.140':110
'0.#.2.141':110
'0.#.2.143':110
'0.#.2.144':110
'0.#.2.142':110
'0.#.2.128':110
'0.#.2.110':110
'0.#.2.112':110
'0.#.2.114':110
'0.#.2.111':110
'0.#.2.109':110
'0.#.2.108':110
'0.#.2.100':110
'0.#.2.105':110
'0.#.2.99':110
'0.#.2.107':110
'0.#.2.106':110
'0.#.2.115':110
'0.#.2.122':110
'0.#.2.120':110
'0.#.2.123':110
'0.#.2.124':110
'0.#.2.126':110
'0.#.2.119':110
'0.#.2.118':110
'0.#.2.117':110
'0.#.2.113':110
'0.#.2.121':110
'0.#.2.116':110
'0.#.1.116':110
'0.#.0.123':110
'0.#.0.126':110
'0.#.0.127':110
'0.#.0.131':110
'0.#.0.128':110
'0.#.0.125':110
'0.#.0.120':110
'0.#.0.118':110
'0.#.0.121':110
'0.#.0.122':110
'0.#.0.124':110
'0.#.0.129':110
'0.#.0.139':110
'0.#.0.135':110
'0.#.0.141':110
'0.#.0.142':110
'0.#.0.138':110
'0.#.0.130':110
'0.#.0.132':110
'0.#.0.134':110
'0.#.0.133':110
'0.#.0.137':110
'0.#.0.136':110
'0.#.0.119':110
'0.#.0.95':110
'0.#.0.103':110
'0.#.0.98':110
'0.#.0.106':110
'0.#.0.104':110
'0.#.0.100':110
'0.#.0.99':110
'0.#.0.93':110
'0.#.0.97':110
'0.#.0.101':110
'0.#.0.102':110
'0.#.0.107':110
'0.#.0.114':110
'0.#.0.112':110
'0.#.0.115':110
'0.#.0.117':110
'0.#.0.116':110
'0.#.0.105':110
'0.#.0.109':110
'0.#.0.108':110
'0.#.0.110':110
'0.#.0.111':110
'0.#.0.113':110
'0.#.0.176':110
'0.#.0.174':110
'0.#.0.180':110
'0.#.0.175':110
'0.#.0.178':110
'0.#.0.173':110
'0.#.0.169':110
'0.#.0.165':110
'0.#.0.170':110
'0.#.0.177':110
'0.#.0.172':110
'0.#.0.171':110
'0.#.0.181':110
'0.#.0.184':110
'0.#.0.185':110
'0.#.0.186':110
'0.#.0.189':110
'0.#.0.188':110
'0.#.0.166':110
'0.#.0.179':110
'0.#.0.167':110
'0.#.0.182':110
'0.#.0.183':110
'0.#.0.168':110
'0.#.0.145':110
'0.#.0.151':110
'0.#.0.147':110
'0.#.0.156':110
'0.#.0.154':110
'0.#.0.148':110
'0.#.0.144':110
'0.#.0.143':110
'0.#.0.140':110
'0.#.0.149':110
'0.#.0.146':110
'0.#.0.153':110
'0.#.0.164':110
'0.#.0.162':110
'0.#.0.161':110
'0.#.0.163':110
'0.#.0.160':110
'0.#.0.152':110
'0.#.0.158':110
'0.#.0.157':110
'0.#.0.150':110
'0.#.0.159':110
'0.#.0.155':110
'0.#.0.96':110
'0.#.0.15':110
'0.#.0.27':110
'0.#.0.32':110
'0.#.0.34':110
'0.#.0.33':110
'0.#.0.31':110
'0.#.0.19':110
'0.#.0.26':110
'0.#.0.20':110
'0.#.0.11':110
'0.#.0.17':110
'0.#.0.35':110
'0.#.0.42':110
'0.#.0.43':110
'0.#.0.46':110
'0.#.0.47':110
'0.#.0.44':110
'0.#.0.41':110
'0.#.0.37':110
'0.#.0.36':110
'0.#.0.38':110
'0.#.0.40':110
'0.#.0.39':110
'0.#.0.24':110
'0.#.0.7':110
'0.#.0.9':110
'0.#.0.8':110
'0.#.0.4':110
'0.#.0.13':110
'0.#.0.3':110
'0.#.0.1':110
'xy#.#ulthar.biz':80
'0.#.0.6':110
'0.#.0.2':110
'0.#.0.10':110
'0.#.0.5':110
'0.#.0.28':110
'0.#.0.16':110
'0.#.0.29':110
'0.#.0.30':110
'0.#.0.23':110
'0.#.0.18':110
'0.#.0.12':110
'0.#.0.14':110
'0.#.0.22':110
'0.#.0.21':110
'0.#.0.25':110
'0.#.0.78':110
'0.#.0.77':110
'0.#.0.79':110
'0.#.0.81':110
'0.#.0.80':110
'0.#.0.75':110
'0.#.0.71':110
'0.#.0.72':110
'0.#.0.74':110
'0.#.0.73':110
'0.#.0.76':110
'0.#.0.82':110
'0.#.0.89':110
'0.#.0.91':110
'0.#.0.94':110
'0.#.0.92':110
'0.#.0.90':110
'0.#.0.87':110
'0.#.0.86':110
'0.#.0.84':110
'0.#.0.83':110
'0.#.0.88':110
'0.#.0.85':110
'0.#.0.70':110
'0.#.0.55':110
'0.#.0.54':110
'0.#.0.53':110
'0.#.0.56':110
'0.#.0.57':110
'0.#.0.52':110
'0.#.0.49':110
'0.#.0.48':110
'0.#.0.45':110
'0.#.0.51':110
'0.#.0.50':110
'0.#.0.59':110
'0.#.0.67':110
'0.#.0.66':110
'0.#.0.65':110
'0.#.0.68':110
'0.#.0.69':110
'0.#.0.64':110
'0.#.0.61':110
'0.#.0.60':110
'0.#.0.63':110
'0.#.0.58':110
'0.#.0.62':110
'0.#.1.59':110
'0.#.1.58':110
'0.#.1.60':110
'0.#.1.61':110
'0.#.1.65':110
'0.#.1.41':110
'0.#.1.51':110
'0.#.1.55':110
'0.#.1.57':110
'0.#.1.45':110
'0.#.1.56':110
'0.#.1.66':110
'0.#.1.68':110
'0.#.1.73':110
'0.#.1.64':110
'0.#.1.75':110
'0.#.1.71':110
'0.#.1.70':110
'0.#.1.62':110
'0.#.1.67':110
'0.#.1.63':110
'0.#.1.69':110
'0.#.1.72':110
'0.#.1.52':110
'0.#.1.38':110
'0.#.1.37':110
'0.#.1.40':110
'0.#.1.25':110
'0.#.1.39':110
'0.#.1.36':110
'0.#.1.31':110
'0.#.1.30':110
'0.#.1.32':110
'0.#.1.35':110
'0.#.1.34':110
'0.#.1.46':110
'0.#.1.53':110
'0.#.1.49':110
'0.#.1.54':110
'0.#.1.33':110
'0.#.1.22':110
'0.#.1.50':110
'0.#.1.47':110
'0.#.1.42':110
'0.#.1.44':110
'0.#.1.48':110
'0.#.1.43':110
'0.#.1.109':110
'0.#.1.107':110
'0.#.1.110':110
'0.#.1.112':110
'0.#.1.111':110
'0.#.1.108':110
'0.#.1.100':110
'0.#.1.92':110
'0.#.1.104':110
'0.#.1.105':110
'0.#.1.103':110
'0.#.1.113':110
'0.#.1.98':110
'0.#.1.121':110
'0.#.1.119':110
'0.#.1.122':110
'0.#.1.120':110
'0.#.1.118':110
'0.#.1.114':110
'0.#.1.102':110
'0.#.1.115':110
'0.#.1.117':110
'0.#.1.106':110
'0.#.1.101':110
'0.#.1.82':110
'0.#.1.80':110
'0.#.1.84':110
'0.#.1.85':110
'0.#.1.86':110
'0.#.1.81':110
'0.#.1.76':110
'0.#.1.74':110
'0.#.1.79':110
'0.#.1.78':110
'0.#.1.77':110
'0.#.1.88':110
'0.#.1.96':110
'0.#.1.91':110
'0.#.1.94':110
'0.#.1.99':110
'0.#.1.97':110
'0.#.1.93':110
'0.#.1.89':110
'0.#.1.83':110
'0.#.1.95':110
'0.#.1.90':110
'0.#.1.87':110
'0.#.1.29':110
'0.#.0.226':110
'0.#.0.220':110
'0.#.0.225':110
'0.#.0.224':110
'0.#.0.227':110
'0.#.0.222':110
'0.#.0.217':110
'0.#.0.208':110
'0.#.0.210':110
'0.#.0.221':110
'0.#.0.219':110
'0.#.0.228':110
'0.#.0.230':110
'0.#.0.238':110
'0.#.0.235':110
'0.#.0.206':110
'0.#.0.234':110
'0.#.0.237':110
'0.#.0.232':110
'0.#.0.229':110
'0.#.0.231':110
'0.#.0.239':110
'0.#.0.218':110
'0.#.0.216':110
'0.#.0.190':110
'0.#.0.196':110
'0.#.0.199':110
'0.#.0.200':110
'0.#.0.198':110
'0.#.0.195':110
'0.#.0.191':110
'0.#.0.187':110
'0.#.0.192':110
'0.#.0.193':110
'0.#.0.194':110
'0.#.0.202':110
'0.#.0.211':110
'0.#.0.212':110
'0.#.0.214':110
'0.#.0.213':110
'0.#.0.215':110
'0.#.0.197':110
'0.#.0.209':110
'0.#.0.203':110
'0.#.0.207':110
'0.#.0.205':110
'0.#.0.201':110
'0.#.1.5':110
'0.#.1.1':110
'0.#.1.14':110
'0.#.1.16':110
'0.#.1.15':110
'0.#.1.13':110
'0.#.1.7':110
'0.#.1.6':110
'0.#.1.10':110
'0.#.1.9':110
'0.#.1.12':110
'0.#.1.8':110
'0.#.1.26':110
'0.#.1.23':110
'0.#.1.27':110
'0.#.1.28':110
'0.#.1.24':110
'0.#.1.21':110
'0.#.1.17':110
'0.#.1.11':110
'0.#.1.18':110
'0.#.1.20':110
'0.#.1.19':110
'0.#.1.0':110
'0.#.0.204':110
'0.#.0.244':110
'0.#.0.245':110
'0.#.0.246':110
'0.#.0.247':110
'0.#.0.243':110
'0.#.0.241':110
'0.#.0.240':110
'0.#.0.236':110
'0.#.0.242':110
'0.#.0.233':110
'0.#.0.248':110
'0.#.0.254':110
'0.#.0.253':110
'0.#.1.3':110
'0.#.1.2':110
'0.#.1.4':110
'0.#.0.255':110
'0.#.0.250':110
'0.#.0.249':110
'0.#.0.251':110
'0.#.0.223':110
'0.#.0.252':110

UDP:

DNS ASK xy#.#ulthar.biz

Другое:

Ищет следующие окна:

ClassName: 'Indicator' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней