Trojan.Starman.6348

Technical Information

To ensure autorun and distribution:

Creates or modifies the following files:

%WINDIR%\Tasks\SA.DAT

Malicious functions:

Executes the following:

'<SYSTEM32>\svchost.exe' -k netsvcs

Modifies file system :

Creates the following files:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Network activity:

Connects to:

'21#.84.8.57':139
'21#.#4.13.88':139
'21#.#4.60.42':139
'21#.#4.64.192':139
'21#.#4.154.161':139
'21#.#4.46.239':139
'21#.#4.148.218':139
'21#.#4.58.192':139
'21#.#4.176.90':139
'21#.#4.114.224':139
'21#.#4.250.78':139
'21#.#4.39.194':139
'21#.#4.6.207':139
'21#.#4.31.110':139
'21#.#4.57.94':445
'21#.#4.28.249':445
'21#.#4.201.142':139
'21#.#4.39.245':139
'21#.#4.10.129':139
'21#.84.82.6':139
'21#.84.30.8':139
'21#.#4.240.183':139
'21#.#4.64.192':445
'21#.#4.154.161':445
'21#.#4.250.78':445
'21#.#4.10.129':445
'21#.#4.39.245':445
'21#.#4.176.90':445
'21#.#4.114.224':445
'21#.#4.13.88':445
'21#.#4.60.42':445
'21#.84.8.57':445
'21#.#4.201.142':445
'21#.#4.143.53':139
'21#.#4.100.241':139
'21#.#4.96.44':139
'21#.#4.118.160':139
'21#.#4.6.236':139
'21#.84.82.6':445
'21#.84.30.8':445
'21#.#4.6.207':445
'21#.#4.31.110':445
'21#.#4.39.194':445
'21#.#4.95.91':139
'21#.#4.177.237':139
'21#.#4.42.105':139
'21#.#4.227.96':139
'21#.#4.104.227':139
'21#.#4.249.92':445
'21#.#4.100.138':445
'21#.#4.28.249':139
'21#.#4.111.6':139
'21#.#4.57.94':139
'21#.84.1.16':139
'21#.#4.46.181':139
'21#.#4.49.101':139
'21#.#4.69.229':139
'21#.#4.30.71':139
'21#.#4.110.113':139
'21#.#4.202.30':139
'21#.#4.112.252':139
'21#.#4.174.106':139
'21#.#4.35.202':139
'21#.#4.73.35':139
'21#.#4.139.180':445
'21#.84.1.16':445
'21#.#4.227.96':445
'21#.#4.112.252':445
'21#.#4.174.106':445
'21#.#4.202.30':445
'21#.#4.177.237':445
'21#.#4.111.6':445
'21#.#4.95.91':445
'21#.#4.104.227':445
'21#.#4.42.105':445
'21#.#4.73.35':445
'21#.#4.70.84':445
'21#.#4.30.71':445
'21#.#4.2.167':445
'21#.#4.108.139':445
'21#.#4.62.121':445
'21#.#4.49.101':445
'21#.#4.35.202':445
'21#.#4.46.181':445
'21#.#4.110.113':445
'21#.#4.69.229':445
'21#.#4.111.202':445
'21#.#4.114.57':445
'21#.#4.194.171':445
'21#.#4.145.18':445
'21#.#4.171.164':445
'21#.#4.180.131':139
'21#.#4.204.3':139
'21#.#4.31.22':139
'21#.#4.68.37':445
'21#.#4.192.239':445
'21#.#4.74.180':445
'21#.84.1.52':445
'21#.#4.242.37':445
'21#.#4.108.127':445
'21#.#4.187.188':445
'21#.#4.126.188':445
'21#.#4.131.204':445
'21#.#4.63.69':445
'21#.#4.46.62':445
'21#.#4.61.212':445
'21#.#4.242.48':445
'21#.#4.212.67':139
'21#.84.7.79':139
'21#.#4.85.120':139
'21#.#4.214.216':139
'21#.#4.28.62':139
'21#.#4.88.20':139
'21#.#4.227.99':139
'21#.#4.54.237':139
'21#.#4.100.186':139
'21#.#4.11.150':139
'21#.#4.33.184':139
'21#.#4.62.90':139
'21#.#4.96.101':139
'21#.84.63.3':139
'21#.#4.18.157':139
'21#.84.4.34':139
'21#.#4.164.196':139
'21#.#4.26.87':139
'21#.#4.52.125':139
'21#.#4.85.234':139
'21#.#4.20.187':139
'21#.#4.113.55':139
'21#.#4.223.207':139
'21#.#4.192.184':139
'21#.#4.89.192':139
'21#.84.1.47':139
'21#.#4.102.75':139
'21#.#4.108.127':139
'21#.84.1.52':139
'21#.#4.126.188':139
'21#.#4.225.45':139
'21#.#4.187.188':139
'21#.#4.70.232':139
'21#.#4.240.183':445
'21#.#4.118.160':445
'21#.#4.148.218':445
'21#.#4.58.192':445
'21#.#4.46.239':445
'21#.#4.100.241':445
'21#.#4.231.171':139
'21#.#4.143.53':445
'21#.#4.6.236':445
'21#.#4.96.44':445
'21#.#4.242.37':139
'21#.#4.70.232':445
'21#.84.1.47':445
'21#.#4.231.171':445
'21#.#4.68.37':139
'21#.#4.192.239':139
'21#.#4.192.184':445
'21#.#4.225.45':445
'21#.#4.223.207':445
'21#.#4.102.75':445
'21#.#4.89.192':445
'21#.#4.114.57':139
'21#.#4.131.204':139
'21#.#4.63.69':139
'21#.#4.46.62':139
'21#.#4.61.212':139
'21#.#4.242.48':139
'21#.#4.194.171':139
'21#.#4.111.202':139
'21#.#4.171.164':139
'21#.#4.74.180':139
'21#.#4.145.18':139
'21#.#4.15.244':445
'21#.#4.90.64':445
'21#.#4.64.231':445
'21#.#4.195.61':445
'21#.#4.202.111':445
'21#.#4.133.99':445
'21#.#4.2.129':445
'21#.#4.139.38':445
'21#.#4.21.50':445
'21#.84.22.1':445
'21#.#4.207.161':445
'21#.#4.33.185':139
'21#.84.8.67':139
'21#.#4.202.155':139
'21#.#4.28.58':139
'21#.#4.38.152':139
'21#.84.29.4':445
'21#.#4.190.150':445
'21#.84.39.5':139
'21#.#4.19.251':139
'21#.#4.213.59':139
'21#.#4.154.11':445
'21#.#4.132.83':445
'21#.#4.123.168':445
'21#.#4.61.133':445
'21#.#4.229.105':445
'21#.#4.37.225':445
'21#.#4.143.17':445
'21#.#4.134.73':445
'21#.#4.197.39':445
'21#.#4.72.22':445
'21#.#4.18.252':445
'21#.#4.237.125':445
'21#.#4.7.243':445
'21#.#4.81.111':445
'21#.#4.12.112':445
'21#.84.8.26':445
'21#.#4.141.235':445
'21#.#4.204.203':445
'21#.#4.42.108':445
'21#.#4.204.70':445
'21#.#4.48.190':445
'21#.#4.70.204':445
'21#.84.8.26':139
'21#.#4.141.235':139
'21#.#4.154.11':139
'21#.#4.133.99':139
'21#.#4.2.129':139
'21#.#4.48.190':139
'21#.#4.70.204':139
'21#.#4.81.111':139
'21#.#4.12.112':139
'21#.#4.7.243':139
'21#.#4.139.38':139
'21#.#4.195.61':139
'21#.84.29.4':139
'21#.#4.190.150':139
'21#.#4.202.111':139
'21#.#4.207.161':139
'21#.#4.21.50':139
'21#.84.22.1':139
'21#.#4.90.64':139
'21#.#4.64.231':139
'21#.#4.15.244':139
'21#.#4.204.70':139
'21#.#4.76.18':139
'21#.#4.154.158':139
'21#.#4.15.247':139
'21#.#4.143.17':139
'21#.#4.134.73':139
'21#.#4.39.244':139
'21#.#4.50.100':139
'21#.#4.40.182':139
'21#.#4.77.90':139
'21#.#4.182.60':139
'21#.#4.197.39':139
'21#.#4.229.105':139
'21#.#4.37.225':139
'21#.#4.237.125':139
'21#.#4.204.203':139
'21#.#4.42.108':139
'21#.#4.72.22':139
'21#.#4.18.252':139
'21#.#4.123.168':139
'21#.#4.61.133':139
'21#.#4.132.83':139
'21#.#4.18.227':445
'21#.#4.39.158':445
'21#.#4.60.109':445
'21#.#4.195.39':445
'21#.#4.156.248':445
'21#.#4.187.27':445
'21#.#4.145.86':445
'21#.#4.27.170':445
'21#.#4.41.149':445
'21#.#4.61.238':445
'21#.#4.248.89':139
'21#.#4.172.113':139
'21#.#4.27.149':139
'21#.#4.158.117':139
'21#.#4.115.2':139
'21#.#4.117.115':139
'21#.#4.32.63':139
'21#.84.0.90':139
'21#.#4.159.37':139
'21#.#4.185.139':139
'21#.#4.34.249':139
'21#.#4.72.77':445
'21#.#4.249.92':139
'21#.#4.100.138':139
'21#.#4.248.89':445
'21#.#4.32.63':445
'21#.84.0.90':445
'21#.#4.2.167':139
'21#.#4.70.84':139
'21#.#4.62.121':139
'21#.#4.139.180':139
'21#.#4.108.139':139
'21#.#4.159.37':445
'21#.#4.115.2':445
'21#.#4.117.115':445
'21#.#4.195.118':445
'21#.#4.56.254':445
'21#.#4.175.225':445
'21#.#4.185.139':445
'21#.#4.34.249':445
'21#.#4.27.149':445
'21#.#4.158.117':445
'21#.#4.172.113':445
'21#.#4.213.59':445
'21#.84.39.5':445
'21#.#4.19.251':445
'21#.#4.33.185':445
'21#.84.8.67':445
'21#.84.22.1':9988
'21#.#4.139.38':9988
'21#.#4.64.231':9988
'21#.#4.15.244':9988
'21#.84.29.4':9988
'21#.#4.202.155':445
'21#.#4.77.90':445
'21#.#4.182.60':445
'21#.#4.154.158':445
'21#.#4.15.247':445
'21#.#4.76.18':445
'21#.#4.28.58':445
'21#.#4.38.152':445
'21#.#4.50.100':445
'21#.#4.40.182':445
'21#.#4.39.244':445
'21#.#4.133.99':9988
'21#.#4.27.170':139
'21#.#4.187.27':139
'21#.#4.61.238':139
'21#.#4.39.158':139
'21#.#4.41.149':139
'21#.#4.175.225':139
'21#.#4.195.118':139
'21#.#4.56.254':139
'21#.#4.145.86':139
'21#.#4.72.77':139
'21#.#4.18.227':139
'21#.#4.37.225':9988
'21#.#4.132.83':9988
'21#.#4.48.190':9988
'21#.#4.2.129':9988
'21#.#4.154.11':9988
'21#.#4.156.248':139
'21#.#4.60.109':139
'21#.#4.195.39':139
'21#.#4.72.22':9988
'21#.#4.197.39':9988

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial