Home / malware TrojanDownloader:Win32/Beebone.HP
First posted on 03 May 2013.
Source: MicrosoftAliases :
TrojanDownloader:Win32/Beebone.HP is also known as Downloader-FKH!9848906A7E60 (McAfee), Worm.Win32.WBNA.ipa (Kaspersky), W32.Changeup (Symantec).
Explanation :
TrojanDownloader:Win32/Beebone.HP is a trojan that silently downloads and installs other programs without consent. This could include the installation of additional malware or malware components to an affected computer. Installation TrojanDownloader:Win32/Beebone.HP creates the following files on an affected computer:
Payload Contacts remote host TrojanDownloader:Win32/Beebone.HP may contact a remote host at domai.3ddns.biz using port 443. Commonly, malware may contact a remote host for the following purposes:
- %windir%\temp\scs7.tmp
- %windir%\temp\scs8.tmp
- %windir%\temp\scs9.tmp
- %windir%\temp\scsa.tmp
- c:\documents and settings\administrator\0nj.exe
- c:\documents and settings\administrator\1nj.exe
- To report a new infection to its author
- To receive configuration or other data
- To download and execute arbitrary files (including updates or additional malware)
- To receive instruction from a remote attacker
- To upload data taken from the affected computer
This malware description was produced and published using our automated analysis system's examination of file SHA1 0e0c88dae30d6872929218da0b8d010e5414082a.Last update 03 May 2013
