Home / malware TrojanDownloader:Win32/Wobeefac.A
First posted on 22 May 2014.
Source: MicrosoftAliases :
There are no other names known for TrojanDownloader:Win32/Wobeefac.A.
Explanation :
Threat behavior
Installation
TrojanDownloader:Win32/Wobeefac.A creates the following files on your PC:
- c:\documents and settings\administrator\application data\machine32.exe
- c:\documents and settings\administrator\application data\machine64.exe
- c:\documents and settings\administrator\local settings\temp\aute.tmp
- c:\documents and settings\administrator\local settings\temp\tqx43zi.rx5
Payload
Contacts remote host
TrojanDownloader:Win32/Wobeefac.A might contact a remote host at storage.googleapis.com using port 80. Commonly, malware does this to:This malware description was produced and published using automated analysis of file SHA1 136d72ebf534fbd1be320636bdd1b2c35c37e086.Symptoms
- Report a new infection to its author
- Receive configuration or other data
- Download and run files, including updates or other malware
- Receive instructions from a remote hacker
- Upload data taken from your PC
System changes
The following could indicate that you have this threat on your PC:
- You have these files:
c:\documents and settings\administrator\application data\machine32.exe
c:\documents and settings\administrator\application data\machine64.exe
c:\documents and settings\administrator\local settings\temp\aute.tmp
c:\documents and settings\administrator\local settings\temp\tqx43zi.rx5Last update 22 May 2014