Home / malwarePDF  

TrojanDownloader:Win32/Beebone.HM


First posted on 01 May 2013.
Source: Microsoft

Aliases :

TrojanDownloader:Win32/Beebone.HM is also known as W32/Autorun.worm.aaeh!heur (McAfee), WORM_VOBFUS.SMMC (Trend Micro), Trojan.Win32.SelfDel.aptm (Kaspersky), W32.Changeup!gen36 (Symantec).

Explanation :



TrojanDownloader:Win32/Beebone.HM is a trojan that silently downloads and installs other programs without consent. This could include the installation of additional malware or malware components to an affected computer. Installation TrojanDownloader:Win32/Beebone.HM creates the following files on an affected computer:

  • %windir%\temp\scs7.tmp
  • %windir%\temp\scs8.tmp
  • %windir%\temp\scs9.tmp
  • %windir%\temp\scsa.tmp
  • c:\documents and settings\administrator\0xtb.exe
  • c:\documents and settings\administrator\1xtb.exe
Payload Contacts remote host TrojanDownloader:Win32/Beebone.HM may contact a remote host at domai.3noip.com using port 443. Commonly, malware may contact a remote host for the following purposes:
  • To report a new infection to its author
  • To receive configuration or other data
  • To download and execute arbitrary files (including updates or additional malware)
  • To receive instruction from a remote attacker
  • To upload data taken from the affected computer

This malware description was produced and published using our automated analysis system's examination of file SHA1 9e2dbb0e90ca31df2f4fc9fab416d4d3b8b67fdf.

Last update 01 May 2013

 

TOP