Trojan.Starman.6701

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WER2025.dir00\svchost.exe.mdmp 16325836412032392

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER2025.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'19#.#41.232.165':139
'19#.#41.43.168':139
'19#.#41.6.22':139
'19#.#41.250.92':139
'19#.#41.83.74':139
'19#.#41.208.60':139
'19#.#41.133.207':139
'19#.#41.179.213':139
'19#.#41.105.44':139
'19#.#41.2.200':139
'19#.#41.146.246':139
'19#.#41.36.27':139
'19#.#41.55.98':139
'19#.#41.41.169':139
'19#.#41.18.192':139
'19#.#41.190.170':139
'19#.#41.241.188':139
'19#.#41.59.86':139
'19#.#41.73.97':139
'19#.#41.236.84':139
'19#.#41.10.123':139
'19#.#41.241.188':445
'19#.#41.250.92':445
'19#.#41.190.170':445
'19#.#41.236.84':445
'19#.#41.59.86':445
'19#.#41.43.168':445
'19#.#41.105.44':445
'19#.#41.232.165':445
'19#.#41.83.74':445
'19#.#41.6.22':445
'19#.#41.224.211':445
'19#.#41.41.169':445
'19#.#41.212.20':445
'19#.#41.62.179':139
'19#.#41.194.200':139
'19#.#41.36.27':445
'19#.#41.73.97':445
'19#.#41.146.246':445
'19#.#41.18.192':445
'19#.#41.55.98':445
'19#.#41.224.211':139
'19#.#41.20.248':139
'19#.#41.28.223':445
'19#.#41.248.95':139
'19#.#41.50.31':139
'19#.#41.96.14':139
'19#.#41.224.186':445
'19#.#41.31.189':445
'19#.#41.187.31':445
'19#.#41.106.41':445
'19#.#41.31.106':445
'19#.#41.175.5':139
'19#.#41.199.161':139
'19#.#41.72.65':139
'19#.#41.53.21':139
'19#.#41.10.66':139
'19#.#41.161.10':139
'19#.#41.141.109':139
'19#.#41.186.211':139
'19#.#41.115.71':139
'19#.#41.125.115':139
'19#.#41.137.100':445
'19#.#41.161.10':445
'19#.#41.141.109':445
'19#.#41.186.211':445
'19#.#41.115.71':445
'19#.#41.125.115':445
'19#.#41.20.248':445
'19#.#41.212.20':139
'19#.#41.248.95':445
'19#.#41.50.31':445
'19#.#41.96.14':445
'19#.#41.251.77':445
'19#.#41.20.251':445
'19#.#41.22.221':445
'19#.#41.119.32':445
'19#.#41.92.127':445
'19#.#41.175.5':445
'19#.#41.199.161':445
'19#.#41.72.65':445
'19#.#41.53.21':445
'19#.#41.10.66':445
'19#.#41.2.200':445
'19#.#41.135.215':445
'19#.#41.23.135':445
'19#.#41.157.234':445
'19#.#41.53.88':445
'19#.#41.219.96':445
'19#.#41.209.137':139
'19#.#41.178.129':139
'19#.#41.28.98':139
'19#.#41.158.191':445
'19#.#41.97.83':139
'19#.#41.85.195':445
'19#.#41.126.55':445
'19#.#41.216.228':445
'19#.#41.157.119':445
'19#.#41.61.52':445
'19#.#41.83.87':445
'19#.#41.88.83':445
'19#.#41.87.121':445
'19#.#41.151.174':445
'19#.#41.121.213':445
'19#.#41.130.141':139
'19#.#41.227.184':139
'19#.#41.146.228':139
'19#.#41.33.8':139
'19#.#41.168.103':139
'19#.#41.18.194':139
'19#.#41.21.109':139
'19#.#41.201.210':139
'19#.#41.179.108':139
'19#.#41.51.71':139
'19#.#41.108.60':139
'19#.#41.32.232':139
'19#.#41.52.115':139
'19#.#41.3.230':139
'19#.#41.206.251':139
'19#.#41.164.207':139
'19#.#41.143.55':139
'19#.#41.212.142':139
'19#.#41.188.126':139
'19#.#41.140.213':139
'19#.#41.29.183':139
'19#.#41.118.45':445
'19#.#41.57.157':139
'19#.#41.216.212':139
'19#.#41.153.241':139
'19#.#41.140.179':139
'19#.#41.242.25':139
'19#.#41.216.228':139
'19#.#41.85.195':139
'19#.#41.61.52':139
'19#.#41.118.45':139
'19#.#41.157.119':139
'19#.#41.10.123':445
'19#.#41.62.179':445
'19#.#41.133.207':445
'19#.#41.179.213':445
'19#.#41.208.60':445
'19#.#41.20.228':139
'19#.#41.38.226':139
'19#.#41.129.111':139
'19#.#41.194.200':445
'19#.#41.97.6':139
'19#.#41.126.55':139
'19#.#41.20.228':445
'19#.#41.38.226':445
'19#.#41.129.111':445
'19#.#41.158.191':139
'19#.#41.97.6':445
'19#.#41.57.157':445
'19#.#41.216.212':445
'19#.#41.153.241':445
'19#.#41.140.179':445
'19#.#41.242.25':445
'19#.#41.83.87':139
'19#.#41.88.83':139
'19#.#41.87.121':139
'19#.#41.151.174':139
'19#.#41.121.213':139
'19#.#41.135.215':139
'19#.#41.23.135':139
'19#.#41.157.234':139
'19#.#41.53.88':139
'19#.#41.219.96':139
'19#.#41.20.251':139
'19#.#41.168.22':445
'19#.#41.38.73':445
'19#.#41.173.140':445
'19#.#41.50.34':445
'19#.#41.10.187':445
'19#.#41.5.22':445
'19#.#41.214.164':445
'19#.#41.21.198':445
'19#.#41.152.254':445
'19#.#41.64.73':445
'19#.#41.50.123':139
'19#.#41.195.50':139
'19#.#41.123.237':139
'19#.#41.148.1':139
'19#.#41.237.143':139
'19#.#41.200.139':139
'19#.#41.14.130':445
'19#.#41.59.225':139
'19#.#41.203.19':139
'19#.#41.240.38':139
'19#.#41.240.80':445
'19#.#41.184.8':445
'19#.#41.194.150':445
'19#.#41.60.103':445
'19#.#41.165.82':445
'19#.#41.168.164':445
'19#.#41.111.88':445
'19#.#41.221.106':445
'19#.#41.40.120':445
'19#.#41.161.194':445
'19#.#41.124.177':445
'19#.#41.8.76':445
'19#.#41.71.26':445
'19#.#41.51.188':445
'19#.#41.140.240':445
'19#.#41.23.139':445
'19#.#41.72.159':445
'19#.#41.82.221':445
'19#.#41.31.5':445
'19#.#41.68.227':445
'19#.#41.218.211':445
'19#.#41.72.203':139
'19#.#41.23.139':139
'19#.#41.51.188':139
'19#.#41.140.240':139
'19#.#41.214.164':139
'19#.#41.240.80':139
'19#.#41.218.211':139
'19#.#41.31.5':139
'19#.#41.68.227':139
'19#.#41.8.76':139
'19#.#41.71.26':139
'19#.#41.173.140':139
'19#.#41.10.187':139
'19#.#41.168.22':139
'19#.#41.50.34':139
'19#.#41.14.130':139
'19#.#41.21.198':139
'19#.#41.5.22':139
'19#.#41.64.73':139
'19#.#41.38.73':139
'19#.#41.152.254':139
'19#.#41.72.159':139
'19#.#41.92.12':139
'19#.#41.65.75':139
'19#.#41.59.239':139
'19#.#41.221.106':139
'19#.#41.30.11':139
'19#.#41.63.174':139
'19#.#41.142.196':139
'19#.#41.206.201':139
'19#.#41.35.191':139
'19#.#41.202.35':139
'19#.#41.60.103':139
'19#.#41.184.8':139
'19#.#41.168.164':139
'19#.#41.82.221':139
'19#.#41.165.82':139
'19#.#41.40.120':139
'19#.#41.111.88':139
'19#.#41.124.177':139
'19#.#41.194.150':139
'19#.#41.161.194':139
'19#.#41.30.11':445
'19#.#41.229.22':445
'19#.#41.202.16':445
'19#.#41.17.25':445
'19#.#41.5.234':139
'19#.#41.41.254':445
'19#.#41.197.88':445
'19#.#41.215.196':445
'19#.#41.77.242':445
'19#.#41.32.203':445
'19#.#41.208.69':445
'19#.#41.86.68':139
'19#.#41.80.79':139
'19#.#41.85.95':139
'19#.#41.215.196':139
'19#.#41.84.215':139
'19#.#41.157.191':139
'19#.#41.64.68':139
'19#.#41.34.181':139
'19#.#41.96.37':139
'19#.#41.85.15':139
'19#.#41.84.215':445
'19#.#41.224.186':139
'19#.#41.31.189':139
'19#.#41.187.31':139
'19#.#41.106.41':139
'19#.#41.31.106':139
'19#.#41.22.221':139
'19#.#41.251.77':139
'19#.#41.92.127':139
'19#.#41.137.100':139
'19#.#41.119.32':139
'19#.#41.96.37':445
'19#.#41.85.15':445
'19#.#41.80.79':445
'19#.#41.85.95':445
'19#.#41.86.68':445
'19#.#41.5.234':445
'19#.#41.28.223':139
'19#.#41.64.68':445
'19#.#41.34.181':445
'19#.#41.157.191':445
'19#.#41.197.88':139
'19#.#41.195.50':445
'19#.#41.203.19':445
'19#.#41.50.123':445
'19#.#41.237.143':445
'19#.#41.123.237':445
'19#.#41.38.73':9988
'19#.#41.50.34':9988
'19#.#41.200.139':445
'19#.#41.240.38':445
'19#.#41.59.225':445
'19#.#41.35.191':445
'19#.#41.202.35':445
'19#.#41.65.75':445
'19#.#41.59.239':445
'19#.#41.92.12':445
'19#.#41.72.203':445
'19#.#41.148.1':445
'19#.#41.142.196':445
'19#.#41.206.201':445
'19#.#41.63.174':445
'19#.#41.21.198':9988
'19#.#41.41.254':139
'19#.#41.17.25':139
'19#.#41.148.1':9988
'19#.#41.63.174':9988
'19#.#41.72.203':9988
'19#.#41.208.69':139
'19#.#41.77.242':139
'19#.#41.32.203':139
'19#.#41.229.22':139
'19#.#41.202.16':139
'19#.#41.71.26':9988
'19#.#41.68.227':9988
'19#.#41.51.188':9988
'19#.#41.140.240':9988
'19#.#41.23.139':9988
'19#.#41.65.75':9988
'19#.#41.35.191':9988
'19#.#41.72.159':9988
'19#.#41.218.211':9988
'19#.#41.31.5':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней