Home / malware

PDF

TrojanDownloader:Win32/Beebone.IW

First posted on 10 July 2013.
Source: Microsoft

Aliases :

TrojanDownloader:Win32/Beebone.IW is also known as Trojan.Win32.Jorik.Fareit.qsl (Kaspersky).

Explanation :

TrojanDownloader:Win32/Beebone.IW is a trojan that silently downloads and installs other programs without consent. This could include the installation of additional malware or malware components to an affected computer. Installation TrojanDownloader:Win32/Beebone.IW creates the following files on an affected computer:

• c:\documents and settings\administrator\0z44.exe

Payload Contacts remote host TrojanDownloader:Win32/Beebone.IW may contact a remote host at 38071.dns6z.com using port 443. Commonly, malware may contact a remote host for the following purposes:

• To report a new infection to its author
• To receive configuration or other data
• To download and execute arbitrary files (including updates or additional malware)
• To receive instruction from a remote attacker
• To upload data taken from the affected computer

This malware description was produced and published using our automated analysis system's examination of file SHA1 0da850958362ff5003780d53a6a08ee4f0de003e.

Last update 10 July 2013

 

TOP