Home / malware

PDF

TrojanDownloader:Win32/Badiehi.A

First posted on 08 January 2015.
Source: Microsoft

Aliases :

There are no other names known for TrojanDownloader:Win32/Badiehi.A.

Explanation :

Threat behavior

Installation

This threat is a downloader tool that can be used by malware or software bundlers to download other files.

It can be installed by third-party software installers.

Payload

This threat can download and run files on your PC, including other malware.

We have seen this threat download files from URLs that use the following format:

• www..com/.exe
• www..com/.txt
• www..com/.tmp

Where is the name of the downloaded file, for example:

• dlinstlit.txt
• filename2save.tmp
• windows.exe

Stops processes and deletes files

The malware can stop some process and delete the related file. It can also delete registry entries and remove data from explorer.exe memory.



Analysis by Ferdinand Plazo

Symptoms

Alerts from your security software might be the only symptom.

Last update 08 January 2015

 

TOP