Home / malwarePDF  

Constructor:Win32/Hackdrt.A


First posted on 16 June 2010.
Source: SecurityHome

Aliases :

Constructor:Win32/Hackdrt.A is also known as Win-Trojan/Singu.630784 (AhnLab), TR/Crypt.CFI.Gen (Avira), Backdoor.Win32.Blackhole (Ikarus), Backdoor.Win32.Singu.acg (Kaspersky), Generic BackDoor!cqu (McAfee), Sus/ComPack-C (Sophos), MS-DRT Download worm (other).

Explanation :

Constructor:Win32/Hackdrt.A is the detection for a malicious tool used to generate worm malware that runs in a Windows environment. It allows the attacker to configure the capabilities for the generated malware.
Top

Constructor:Win32/Hackdrt.A is the detection for a malicious tool used to generate worm malware that runs in a Windows environment. It allows the attacker to configure the capabilities for the generated malware. When run, the attacker may supply the following options for the newly created malware:

  • URL (for trojan downloaders and MSN worm propagation)
  • Malware capabilities
  • Kill/Protect itself from antivirus
  • LAN propagation
  • C drive propagation
  • USB drive propagation
  • Additional InformationThe constructor may sometimes generate corrupted malware.

    Analysis by Rodel Finones

    Last update 16 June 2010

     

    TOP