Home / malwarePDF  

TrojanDownloader:Win32/Beebone.HW


First posted on 03 May 2013.
Source: Microsoft

Aliases :

TrojanDownloader:Win32/Beebone.HW is also known as Trojan.Win32.SelfDel.apww (Kaspersky).

Explanation :



TrojanDownloader:Win32/Beebone.HW is a trojan that silently downloads and installs other programs without consent. This could include the installation of additional malware or malware components to an affected computer. Installation TrojanDownloader:Win32/Beebone.HW creates the following files on an affected computer:

  • %windir%\temp\scs7.tmp
  • %windir%\temp\scs8.tmp
  • %windir%\temp\scs9.tmp
  • %windir%\temp\scsa.tmp
  • c:\documents and settings\administrator\02xc.exe
  • c:\documents and settings\administrator\12xc.exe
Payload Contacts remote host TrojanDownloader:Win32/Beebone.HW may contact a remote host at domai.8dns.biz using port 443. Commonly, malware may contact a remote host for the following purposes:
  • To report a new infection to its author
  • To receive configuration or other data
  • To download and execute arbitrary files (including updates or additional malware)
  • To receive instruction from a remote attacker
  • To upload data taken from the affected computer

This malware description was produced and published using our automated analysis system's examination of file SHA1 bf131a3287d16dd3cc0d63483f1e0d9c9e785b4b.

Last update 03 May 2013

 

TOP

Malware :