Home / malware TrojanDownloader:Win32/Beebone.II
First posted on 11 June 2013.
Source: MicrosoftAliases :
TrojanDownloader:Win32/Beebone.II is also known as Trojan.Win32.SelfDel.aqgz (Kaspersky).
Explanation :
TrojanDownloader:Win32/Beebone.II is a trojan that silently downloads and installs other programs without consent. This could include the installation of additional malware or malware components to an affected computer. Installation TrojanDownloader:Win32/Beebone.II creates the following files on an affected computer:
Payload Contacts remote host TrojanDownloader:Win32/Beebone.II may contact a remote host at domai.05dns.biz using port 8080. Commonly, malware may contact a remote host for the following purposes:
- %windir%\assembly\nativeimages_v4.0.30319_32\temp\a30-0\system.addin.dll
- %windir%\assembly\nativeimages_v4.0.30319_32\temp\a58-0\system.addin.contract.dll
- %windir%\assembly\nativeimages_v4.0.30319_32\temp\ac4-0\system.componentmodel.dataannotations.dll
- %windir%\temp\scs10.tmp
- %windir%\temp\scs11.tmp
- %windir%\temp\scse.tmp
- %windir%\temp\scsf.tmp
- c:\documents and settings\administrator\0top.exe
- c:\documents and settings\administrator\1top.exe
- To report a new infection to its author
- To receive configuration or other data
- To download and execute arbitrary files (including updates or additional malware)
- To receive instruction from a remote attacker
- To upload data taken from the affected computer
This malware description was produced and published using our automated analysis system's examination of file SHA1 183c2f7181bb8f663e2a38af78834c6a1c142553.Last update 11 June 2013
