Multi.B

Category: Trojan Downloader

Risk: High Risk

* High risk threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction. May open up communication ports, use polymorphic tactics, stealth installations, and/or anti-spy counter measures. May use a security flaw in the operating system to gain access to your computer.

Description: Downloads and executes malicious files from remote sites. Opens ports on infected machine.

Alias: BackDoor-AZV, Troj/Dloader-FC,Trojan.Vicsfram

Signatures:
process: kernels32.exe: MD5 Hash: e001a725bbfca64b3dc
process: kernels32.exe: MD5 Hash: be40e9a2f080a3fc1e4
process: kernels32.exe: MD5 Hash: d5a4a209fbd829745e3
process: kernels32.exe: MD5 Hash: 3c69fb66ced9708dea6
process: kernels32.exe: MD5 Hash: 614d7e7fb1683b83e43
process: kernels32.exe: MD5 Hash: 12d18fcb0758602cb6b
process: kernels32.exe: MD5 Hash: e4f8440c0694ebcef1c
process: kernels32.exe: MD5 Hash: 86f632a93435d945ac2
process: kernels32.exe: MD5 Hash: 5025d3f520f38905d15
process: kernels32.exe: MD5 Hash: ab13b7d4b1564901e17
process: kernels32.exe: MD5 Hash: ff8f39f7616eecd0fe8
process: kernels32.exe: MD5 Hash: 5f7cd5709a96558f307
process: kernels32.exe: MD5 Hash: 899e138747496c72010
process: kernels32.exe: MD5 Hash: 6cd41fcecd6b8c879d8
process: kernels32.exe: MD5 Hash: 1d26e2c83f2b3d29858
process: kernels32.exe: MD5 Hash: 8f28e9af2e005d0567b
process: kernels32.exe: MD5 Hash: fdbc7dd6c3b99811282
process: kernels32.exe: MD5 Hash: 83ef85754db911b95f3
process: kernels32.exe: MD5 Hash: 868c0717407c564ece1
process: kernels32.exe: MD5 Hash: 2a986e3bfcbe70af028
process: kernels32.exe: MD5 Hash: beae476e8c71300c4f8
process: kernels32.exe: MD5 Hash: 7d4408db9cc94eed489
process: kernels32.exe: MD5 Hash: f73fda2cb321316045a
process: kernels32.exe: MD5 Hash: 1f8879c721cb0869427
process: kernels32.exe: MD5 Hash: 4e5db17c5e42be31ac7
process: kernels32.exe: MD5 Hash: cec3f835d8a3fab5589
process: kernels32.exe: MD5 Hash: 89b5e94e58ee993ab09
process: kernels32.exe: MD5 Hash: 919e1d50dba87233792
process: kernels32.exe: MD5 Hash: 887196f86863307ab8e
process: kernels32.exe: MD5 Hash: 67ad19fb90723682ce5
process: kernels32.exe: MD5 Hash: f5f58a658960dc16c48
process: kernels32.exe: MD5 Hash: 67defe30fc1528d8bdf
process: kernels32.exe: MD5 Hash: eeae9a0dd310d7333a4
process: kernels32.exe: MD5 Hash: b23ab560e94250a2003
process: kernels32.exe: MD5 Hash: f6a80b24783201b81f1
process: kernels32.exe: MD5 Hash: 02d828283699fd2f37b
process: kernels32.exe: MD5 Hash: 5377f9cb8e6453a7cc8
process: kernels32.exe: MD5 Hash: c8631798e4c86eb24a0
process: kernels32.exe: MD5 Hash: 85be7a5a341915f166b
process: kernels32.exe: MD5 Hash: 43758acd166c28acb39
process: kernels32.exe: MD5 Hash: 86eb564aaf134215d34
process: kernels32.exe: MD5 Hash: 6232b1d545609909f24
process: kernels32.exe: MD5 Hash: 899ca68102457cc668e
process: kernels32.exe: MD5 Hash: b9d859b1eb2cfa6288a
process: kernels32.exe: MD5 Hash: 84d8f0d30a685c7b002
process: kernels32.exe: MD5 Hash: e30f42b6f44647d7d88
process: kernels32.exe: MD5 Hash: 19c865a5b21b6f1129d
process: kernels32.exe: MD5 Hash: 499a1f178f7b895dbfa
process: kernels32.exe: MD5 Hash: a0194e966ea6ac541f9
process: kernels32.exe: MD5 Hash: 95bc027ef3625488d96
process: kernels32.exe: MD5 Hash: a8bf79373b17b2fef59
process: kernels32.exe: MD5 Hash: abae013c0f0021d8b92
process: kernels32.exe: MD5 Hash: 163048c3535b39bf1ba
process: kernels32.exe: MD5 Hash: 8d3a44ab129607d9cfb
process: kernels32.exe: MD5 Hash: 3dc7f991285d3f995df
process: kernels32.exe: MD5 Hash: 17ef6ba49e4c7481a9b
process: kernels32.exe: MD5 Hash: 8a709d52620bae50488
process: kernels32.exe: MD5 Hash: 32ff7752812c54f1674
process: kernels32.exe: MD5 Hash: e39e83f40d8d9074caf
process: kernels32.exe: MD5 Hash: 8999c4540627f4a1839
process: kernels32.exe: MD5 Hash: bc12e6603b0f331123d
process: kernels32.exe: MD5 Hash: 435598f3f4ebbf3743d
process: kernels32.exe: MD5 Hash: 798a8b269391d86f0d4
process: kernels32.exe: MD5 Hash: 28eb88e34cce08b8304
process: kernels32.exe: MD5 Hash: 8ed9428ca1eaf9f051f
process: kernels32.exe: MD5 Hash: 1677c3ef6fa94d84728
process: kernels32.exe: MD5 Hash: 7acdd251fc0cee4474a
process: kernels32.exe: MD5 Hash: bfea24e545de539cc63
process: kernels32.exe: MD5 Hash: ba2c379c73cf633724d
process: kernels32.exe: MD5 Hash: 38183aaa3fa60fc6e7c
process: kernels32.exe: MD5 Hash: 42faddad85cc937e378
process: kernels32.exe: MD5 Hash: 6c61e18967df4ed74ff
process: kernels32.exe: MD5 Hash: 71cce6d9568eeadf974
process: kernels32.exe: MD5 Hash: 42e4a3cfaff68eaafa5
process: kernels32.exe: MD5 Hash: 9867a08acfff6ced892
process: kernels32.exe: MD5 Hash: 7e21c0447c984189244
process: kernels32.exe: MD5 Hash: 86c1da49a97ec12d337
process: kernels32.exe: MD5 Hash: a2b00dae4dd1e10a375
process: kernels32.exe: MD5 Hash: a0b4b36c0dec526c9e9
process: kernels32.exe: MD5 Hash: 3590d140d50f79db3f7
process: kernels32.exe: MD5 Hash: 60becae3cf9acf3a402
process: kernels32.exe: MD5 Hash: 61e3d9513f2e495e8cc
process: kernels32.exe: MD5 Hash: dac970708621d2091ef
process: kernels32.exe: MD5 Hash: 4ccf1bca6e8a50fae83
process: kernels32.exe: MD5 Hash: 769d5cef4568e08949f
process: kernels32.exe: MD5 Hash: 5a01731ee735831f41f
process: kernels32.exe: MD5 Hash: 6cc24e5360f64b2abb2
process: kernels32.exe: MD5 Hash: da71cde8ed0c8c660d4
process: kernels32.exe: MD5 Hash: d68f49989aa3c56be29
process: kernels32.exe: MD5 Hash: 50cd5398fefcb733dc2
process: kernels32.exe: MD5 Hash: 47a646bd310ddde5772
process: kernels32.exe: MD5 Hash: d8ad3872a2e580f94cc
process: kernels32.exe: MD5 Hash: 1fdc22dcef456850561
process: kernels32.exe: MD5 Hash: a58a941730f3a1a72b2
process: kernels32.exe: MD5 Hash: e0fecc243e164ea5ea1
process: kernels32.exe: MD5 Hash: aade3ce5146123df8eb
process: kernels32.exe: MD5 Hash: 7d3d6c6b54aae2eca9c
process: kernels32.exe: MD5 Hash: 9ea408a0b4535cda08a
process: kernels32.exe: MD5 Hash: 6b989347fb4da35a6d5
process: kernels32.exe: MD5 Hash: cee802a5ecd5c588f55
process: kernels32.exe: MD5 Hash: fa6eeb885dd37745a41
process: kernels32.exe: MD5 Hash: 94e63a7b9768aa50a46
process: kernels32.exe: MD5 Hash: 486f76a84991c657b74
process: kernels32.exe: MD5 Hash: 66210109a334b2d6fac
process: kernels32.exe: MD5 Hash: 0eccb6085238eef1edf
process: kernels32.exe: MD5 Hash: 75438dbf2816e6599aa
process: kernels32.exe: MD5 Hash: 317985061be499088f2
process: kernels32.exe: MD5 Hash: 881f8c637f1d0e226bd
process: kernels32.exe: MD5 Hash: a3c307a669ff3f26b59
process: kernels32.exe: MD5 Hash: e6df5a02f9bfc6d6180
process: kernels32.exe: MD5 Hash: 5003917cc162c725ab3
process: kernels32.exe: MD5 Hash: 9038f8d75c5cea75e86
process: kernels32.exe: MD5 Hash: 9afd24520ca0da48ac9
process: kernels32.exe: MD5 Hash: a15ad6c9315056b98c2
process: kernels32.exe: MD5 Hash: 3d4f0bf15d472e6e658
process: kernels32.exe: MD5 Hash: b6ddf5d58f6489c7ebe
process: kernels32.exe: MD5 Hash: 3b3e5f043aa33ece339
process: kernels32.exe: MD5 Hash: 2a788f73e1441d24d15
process: kernels32.exe: MD5 Hash: d31d499f27f1cfa4537
process: kernels32.exe: MD5 Hash: 935beee2325283f1545
process: kernels32.exe: MD5 Hash: 0793b9751a86aa7253b
process: kernels32.exe: MD5 Hash: e09774d44fa2cf79f11
process: kernels32.exe: MD5 Hash: acfe540fc821635f520
process: kernels32.exe: MD5 Hash: b76c2adb6df99d376bb
process: kernels32.exe: MD5 Hash: 48f0c2ab3e978840e32
process: kernels32.exe: MD5 Hash: 5d6121b3d1e6d9d8c1a
process: kernels32.exe: MD5 Hash: b452b201bb46be91a91
process: kernels32.exe: MD5 Hash: 065bd3612b689f53dbf
process: kernels32.exe: MD5 Hash: ae629078e209365c627
process: kernels32.exe: MD5 Hash: 6df43b47afbb63266a1
process: kernels32.exe: MD5 Hash: d755373c1285f19c2bc
process: kernels32.exe: MD5 Hash: 9211b1c722902fdf07c
process: kernels32.exe: MD5 Hash: 6db5b2d2f8fd9989ab2
process: kernels32.exe: MD5 Hash: 3fcfc1cc5f69873e7a0
process: kernels32.exe: MD5 Hash: 9ef9739b392d19756c6
process: kernels32.exe: MD5 Hash: 65cac2cea67f45caca5
process: kernels32.exe: MD5 Hash: 8a2fc4c2c8bd08e4bce
process: kernels32.exe: MD5 Hash: c03d19539071c0af71c
process: kernels32.exe: MD5 Hash: 89c6893d646cd5f9000
process: kernels32.exe: MD5 Hash: 60347f2570a856415fa
process: kernels32.exe: MD5 Hash: ee47f9ddf5d200abbce
process: kernels32.exe: MD5 Hash: bdf9d01d0dfea8827d7
process: win32.exe: MD5 Hash: 0e68db3e5e950739d62
process: kernels32.exe: MD5 Hash: d96e033bf1a60bf8832
process: kernels32.exe: MD5 Hash: 8b208cc3af0536dc6de
process: kernels32.exe: MD5 Hash: 041d8202dfe2a0a7587
process: kernels32.exe: MD5 Hash: 03deae66e7dcc57468d
process: kernels32.exe: MD5 Hash: 62a0ae94359273cee7c
process: kernels32.exe: MD5 Hash: 4d3159e97f918125da5
process: kernels32.exe: MD5 Hash: 4a99fd605807d8ae8af
process: kernel32.exe: MD5 Hash: f0790c7ae65c53f9f58
process: kernels32.exe: MD5 Hash: 5be8836f4392dcc7ab3
process: kernels32.exe: MD5 Hash: db188161b26fbba53db
process: kernels32.exe: MD5 Hash: 1af74e58b79d7a28ab0
process: kernels32.exe: MD5 Hash: ad3890907f01bb9426b
process: kernels32.exe: MD5 Hash: b111de9c362c76769f1
process: kernels32.exe: MD5 Hash: cfb1fcddc3bb39dbbbb
process: kernels32.exe: MD5 Hash: 356eb626973218b8b06
process: kernels32.exe: MD5 Hash: 30e4269a011c1f46a08
process: kernels32.exe: MD5 Hash: 75cec27a1a9a68cee65
process: kernels32.exe: MD5 Hash: e04e5dac1634da24921
process: kernels32.exe: MD5 Hash: 6efafdffb84bb7b0367
process: kernels32.exe: MD5 Hash: 97b8c8d704fc1704a94
process: kernels32.exe: MD5 Hash: fc74739a3a5379bf9df
process: kernels32.exe: MD5 Hash: f1f817fa11da3b0fed4
process: kernels32.exe: MD5 Hash: 1c398971fcc852151b6
process: kernels32.exe: MD5 Hash: 8aa772a59fc0b25693c
process: kernels32.exe: MD5 Hash: 6cd95a95d070d925590
process: kernels32.exe: MD5 Hash: 07550afc61d4637c776
process: kernels32.exe: MD5 Hash: 71412d414baa76c1347
process: kernels32.exe: MD5 Hash: 435fcaa913362db4699
process: kernels32.exe: MD5 Hash: b9ab6084241d14d9b9f
process: kernels32.exe: MD5 Hash: 24bc7aeb2ad167aec55..