Home / malwarePDF  

TrojanDownloader:Win32/Beebone.JA


First posted on 10 July 2013.
Source: Microsoft

Aliases :

TrojanDownloader:Win32/Beebone.JA is also known as Worm.Win32.Vobfus.dxpf (Kaspersky).

Explanation :



TrojanDownloader:Win32/Beebone.JA is a trojan that silently downloads and installs other programs without consent. This could include the installation of additional malware or malware components to an affected computer. Installation TrojanDownloader:Win32/Beebone.JA creates the following files on an affected computer:

  • %windir%\temp\scs10.tmp
  • %windir%\temp\scs11.tmp
  • %windir%\temp\scse.tmp
  • %windir%\temp\scsf.tmp
  • c:\documents and settings\administrator\0qa4.exe
  • c:\documents and settings\administrator\1qa4.exe
Payload Contacts remote host TrojanDownloader:Win32/Beebone.JA may contact a remote host at 32891.dnsz0.com using port 2323. Commonly, malware may contact a remote host for the following purposes:
  • To report a new infection to its author
  • To receive configuration or other data
  • To download and execute arbitrary files (including updates or additional malware)
  • To receive instruction from a remote attacker
  • To upload data taken from the affected computer

This malware description was produced and published using our automated analysis system's examination of file SHA1 8615b6e7aeef1574f91d55856696578a66fd1de6.

Last update 10 July 2013

 

TOP

Malware :