Trojan.MulDrop28.31092

Техническая информация

Для обеспечения автозапуска и распространения

Устанавливает следующие настройки сервисов

[HKLM\System\CurrentControlSet\Services\DDE Area Viewer 10.16.47] 'Start' = '00000002'
[HKLM\System\CurrentControlSet\Services\DDE Area Viewer 10.16.47] 'ImagePath' = '%ALLUSERSPROFILE%\DDE Area Viewer 10.16.47\DDE Area Viewer 10.16.47.exe'

Создает следующие сервисы

'DDE Area Viewer 10.16.47' %ALLUSERSPROFILE%\DDE Area Viewer 10.16.47\DDE Area Viewer 10.16.47.exe

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-9cdoh.tmp\is-j9ig1.tmp
%LOCALAPPDATA%\sdkplayer\is-apion.tmp
%LOCALAPPDATA%\sdkplayer\is-3q69a.tmp
%LOCALAPPDATA%\sdkplayer\is-bc5rg.tmp
%LOCALAPPDATA%\sdkplayer\is-mo1ik.tmp
%LOCALAPPDATA%\sdkplayer\is-9h9jh.tmp
%LOCALAPPDATA%\sdkplayer\is-7qcq9.tmp
%LOCALAPPDATA%\sdkplayer\is-28c79.tmp
%LOCALAPPDATA%\sdkplayer\is-43u0k.tmp
%LOCALAPPDATA%\sdkplayer\is-iq6og.tmp
%LOCALAPPDATA%\sdkplayer\is-k99e8.tmp
%LOCALAPPDATA%\sdkplayer\is-cphi5.tmp
%LOCALAPPDATA%\sdkplayer\is-327q0.tmp
%LOCALAPPDATA%\sdkplayer\is-2v36f.tmp
%LOCALAPPDATA%\sdkplayer\is-qjgv0.tmp
%LOCALAPPDATA%\sdkplayer\uninstall\unins000.dat
%LOCALAPPDATA%\sdkplayer\is-n15g8.tmp
%LOCALAPPDATA%\sdkplayer\sdkplayer32.exe
%LOCALAPPDATA%\sdkplayer\is-aj720.tmp
%LOCALAPPDATA%\sdkplayer\is-peatc.tmp
%TEMP%\is-95e8j.tmp\_isetup\_regdll.tmp
%TEMP%\is-95e8j.tmp\_isetup\_setup64.tmp
%TEMP%\is-95e8j.tmp\_isetup\_shfoldr.dll
%TEMP%\is-95e8j.tmp\_isetup\_iscrypt.dll
%LOCALAPPDATA%\sdkplayer\uninstall\is-kqvck.tmp
%LOCALAPPDATA%\sdkplayer\is-1vhg2.tmp
%LOCALAPPDATA%\sdkplayer\is-1a2dh.tmp
%LOCALAPPDATA%\sdkplayer\is-oleu2.tmp
%LOCALAPPDATA%\sdkplayer\is-s5d31.tmp
%LOCALAPPDATA%\sdkplayer\is-d29n2.tmp
%LOCALAPPDATA%\sdkplayer\is-jnu3f.tmp
%LOCALAPPDATA%\sdkplayer\is-1e6ao.tmp
%LOCALAPPDATA%\sdkplayer\is-312te.tmp
%LOCALAPPDATA%\sdkplayer\is-27r24.tmp
%LOCALAPPDATA%\sdkplayer\is-n29tp.tmp
%LOCALAPPDATA%\sdkplayer\is-8e95k.tmp
%ALLUSERSPROFILE%\dde area viewer 10.16.47\dde area viewer 10.16.47.exe

Перемещает следующие файлы

%LOCALAPPDATA%\sdkplayer\uninstall\is-kqvck.tmp в %LOCALAPPDATA%\sdkplayer\uninstall\unins000.exe
%LOCALAPPDATA%\sdkplayer\is-327q0.tmp в %LOCALAPPDATA%\sdkplayer\libwinpthread-1.dll
%LOCALAPPDATA%\sdkplayer\is-cphi5.tmp в %LOCALAPPDATA%\sdkplayer\libtiff-5.dll
%LOCALAPPDATA%\sdkplayer\is-k99e8.tmp в %LOCALAPPDATA%\sdkplayer\libsigc-2.0-0.dll
%LOCALAPPDATA%\sdkplayer\is-iq6og.tmp в %LOCALAPPDATA%\sdkplayer\librsvg-2-2.dll
%LOCALAPPDATA%\sdkplayer\is-43u0k.tmp в %LOCALAPPDATA%\sdkplayer\libpng16-16.dll
%LOCALAPPDATA%\sdkplayer\is-28c79.tmp в %LOCALAPPDATA%\sdkplayer\libpixman-1-0.dll
%LOCALAPPDATA%\sdkplayer\is-7qcq9.tmp в %LOCALAPPDATA%\sdkplayer\libpcre-1.dll
%LOCALAPPDATA%\sdkplayer\is-9h9jh.tmp в %LOCALAPPDATA%\sdkplayer\libpangowin32-1.0-0.dll
%LOCALAPPDATA%\sdkplayer\is-mo1ik.tmp в %LOCALAPPDATA%\sdkplayer\libpangomm-1.4-1.dll
%LOCALAPPDATA%\sdkplayer\is-bc5rg.tmp в %LOCALAPPDATA%\sdkplayer\libpangoft2-1.0-0.dll
%LOCALAPPDATA%\sdkplayer\is-3q69a.tmp в %LOCALAPPDATA%\sdkplayer\libpangocairo-1.0-0.dll
%LOCALAPPDATA%\sdkplayer\is-apion.tmp в %LOCALAPPDATA%\sdkplayer\libpango-1.0-0.dll
%LOCALAPPDATA%\sdkplayer\is-2v36f.tmp в %LOCALAPPDATA%\sdkplayer\zlib1.dll
%LOCALAPPDATA%\sdkplayer\is-n15g8.tmp в %LOCALAPPDATA%\sdkplayer\liblzma-5.dll
%LOCALAPPDATA%\sdkplayer\is-8e95k.tmp в %LOCALAPPDATA%\sdkplayer\libjpeg-8.dll
%LOCALAPPDATA%\sdkplayer\is-peatc.tmp в %LOCALAPPDATA%\sdkplayer\libintl-8.dll
%LOCALAPPDATA%\sdkplayer\is-n29tp.tmp в %LOCALAPPDATA%\sdkplayer\libharfbuzz-0.dll
%LOCALAPPDATA%\sdkplayer\is-27r24.tmp в %LOCALAPPDATA%\sdkplayer\libgraphite2.dll
%LOCALAPPDATA%\sdkplayer\is-312te.tmp в %LOCALAPPDATA%\sdkplayer\libgomp-1.dll
%LOCALAPPDATA%\sdkplayer\is-1e6ao.tmp в %LOCALAPPDATA%\sdkplayer\libgobject-2.0-0.dll
%LOCALAPPDATA%\sdkplayer\is-jnu3f.tmp в %LOCALAPPDATA%\sdkplayer\libgmodule-2.0-0.dll
%LOCALAPPDATA%\sdkplayer\is-d29n2.tmp в %LOCALAPPDATA%\sdkplayer\libglibmm-2.4-1.dll
%LOCALAPPDATA%\sdkplayer\is-s5d31.tmp в %LOCALAPPDATA%\sdkplayer\libgdk_pixbuf-2.0-0.dll
%LOCALAPPDATA%\sdkplayer\is-oleu2.tmp в %LOCALAPPDATA%\sdkplayer\libgdkmm-2.4-1.dll
%LOCALAPPDATA%\sdkplayer\is-1a2dh.tmp в %LOCALAPPDATA%\sdkplayer\libgdk-win32-2.0-0.dll
%LOCALAPPDATA%\sdkplayer\is-1vhg2.tmp в %LOCALAPPDATA%\sdkplayer\libgcc_s_dw2-1.dll
%LOCALAPPDATA%\sdkplayer\is-aj720.tmp в %LOCALAPPDATA%\sdkplayer\liblcms2-2.dll
%LOCALAPPDATA%\sdkplayer\is-qjgv0.tmp в %LOCALAPPDATA%\sdkplayer\sdkplayer32.exe