Home / malware

PDF

Backdoor:Python/Raywa.A

First posted on 04 May 2016.
Source: Microsoft

Aliases :

There are no other names known for Backdoor:Python/Raywa.A.

Explanation :

Installation
This threat can create files on your PC, including:

• %TEMP%\_mei32042\mfc90.dll
• %TEMP% \_mei32042\mfc90u.dll
• %TEMP% \_mei32042\mfcm90.dll
• %TEMP% \_mei32042\mfcm90u.dll
• %TEMP% \_mei32042\msvcm90.dll
• %TEMP% \_mei32042\msvcp90.dll
• %TEMP% \_mei32042\python27.dll
• %TEMP% \_mei32042\pythoncom27.dll
• %TEMP% \_mei32042\pywintypes27.dll
• %TEMP% \_mei32042\sqlite3.dll

Payload

Allows backdoor access and control

This threat can give a malicious hacker access and control of your PC. They can then perform a number of different actions, such as:

• Deleting files
• Downloading and running files
• Logging your keystrokes or stealing your sensitive data
• Modifying your system settings
• Running or stopping applications
• Spreading malware to other PCs
• Uploading files

This malware description was published using automated analysis of file SHA1 c465a1240672bda8c0b9cd8ad304bfb23f1c9d04.

Last update 04 May 2016

 

TOP