Trojan.DownLoader47.59303

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-lc8k8.tmp\is-4bsjc.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-2qc6s.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-k2ohs.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-qkccb.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-e06mf.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-h3eqo.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-ls6f8.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-118sd.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-a24nt.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-nepmr.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-h01u9.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-jiscq.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-2k8si.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-tpcgc.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-9hm36.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-eq14q.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-mf3ip.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-5b2gk.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-efd68.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-h8tvk.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-hh1co.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-j8skq.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-ksijm.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\uninstall\is-f20cg.tmp
%TEMP%\is-6qt0n.tmp\_isetup\_iscrypt.dll
%TEMP%\is-6qt0n.tmp\_isetup\_shfoldr.dll
%TEMP%\is-6qt0n.tmp\_isetup\_setup64.tmp
%TEMP%\is-6qt0n.tmp\_isetup\_regdll.tmp
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\uninstall\unins000.dat
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\reggaesr.exe

Перемещает следующие файлы

%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\uninstall\is-f20cg.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\uninstall\unins000.exe
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-qkccb.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\vcruntime140_1.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-e06mf.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\vcruntime140.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-h3eqo.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\vccorlib140.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-ls6f8.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\valuetransformers.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-118sd.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\ucrtbase.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-a24nt.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\netstandard.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-nepmr.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\netsparkle.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-h01u9.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\msvcp140_2.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-jiscq.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\msvcp140_1.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-k2ohs.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\sqlite3.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-2k8si.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\msvcp140.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-9hm36.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\microsoft.appcenter.crashes.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-eq14q.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\microsoft.appcenter.analytics.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-mf3ip.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\devkit.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-5b2gk.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\concrt140.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-efd68.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\colorsetkit.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-h8tvk.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\avutil-57.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-hh1co.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\avformat-59.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-j8skq.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\avfilter-8.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-ksijm.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\avdevice-59.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-tpcgc.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\microsoft.appcenter.dll
%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\is-2qc6s.tmp в %LOCALAPPDATA%\reggae screen recorder 2.3.3.3\reggaesr.exe

Сетевая активность

Подключается к

'st###7345724.ru':80

TCP

Запросы HTTP POST

http://st###7345724.ru/new/net_api

UDP

DNS ASK st###7345724.ru

Другое

Ищет следующие окна

ClassName: 'v3815_ReggaeScreenRecorder_12133_v3815' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\is-lc8k8.tmp\is-4bsjc.tmp' /SL4 $6024C "<Полный путь к файлу>" 6052188 400896
'%LOCALAPPDATA%\reggae screen recorder 2.3.3.3\reggaesr.exe' 435aae789c2af1a537d058159ed03f3a

Запускает на исполнение