Peper

Category: Trojan Downloader

Risk: Severe Risk

* Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine.

Description: When installed, peper will download ads and display popps when surfing the web, also, it will infect your machine by downloading additional copies of itself and other adware. Pepar, attempt to contact websites www.quadro.com. The address for QuadroGram, LLC is listed online as smack dab in the middle of the San Fransisco Bay. (note not the bay area, but in the water)

Alias: Backdoor.VB.nb, pepar trojan, Quadro

Signatures:
process: bhogv.exe: MD5 Hash: 6061e0e0e5ec2198ec1
process: czuoq.exe: MD5 Hash: fcfa9ecdf36d2392b07
process: eah1q5.exe: MD5 Hash: da0d6d75d848f9c6f3e
process: etz3gap2.exe: MD5 Hash: f402f5ae5966139ba9b
process: fruz6x9.exe: MD5 Hash: 0d6beac7c4d7abca785
process: ghjz.exe: MD5 Hash: 2601cdfbb1a913fc9c3
process: iga051.exe: MD5 Hash: 175ab44658f3fab14bc
process: oval63h.exe: MD5 Hash: 36f20fbdba1b212fdb8
process: zhrcofz.exe: MD5 Hash: 5ed065907d44c59bf02
process: gdnhxa.exe: MD5 Hash:
process: hcj2s6.exe: MD5 Hash:
process: wapd25tc.exe: MD5 Hash:
process: zhrcofz.exe: MD5 Hash:
process: lsxi52.exe: MD5 Hash: c39743c2c4241e4f840
process: jqhlsnv.exe: MD5 Hash: 4d368bfba518b301b3b
process: xej7.exe: MD5 Hash: ae7a34d084cf6c8b0a4
process: memoice.exe: MD5 Hash: 9dc2a1daa5f12bd8ffe
process: wfd4nu.exe: MD5 Hash: 2e5c3e90ba0abcef624
process: ubsw.exe: MD5 Hash: 89a7aa69b37144ade3f
process: fah1q6.exe: MD5 Hash: 758aca813b9600d50f0
process: tktbta.exe: MD5 Hash: a9566c3d943d1b61cd8
process: mfhntda.exe: MD5 Hash: ff24257a82838456de2
process: bwd9m.exe: MD5 Hash: ff24257a82838456de2
process: dfshp4.exe: MD5 Hash: bb9b3f6f8d2fa175cca
process: gnsdk.exe: MD5 Hash: 89a7aa69b37144ade3f
process: rnuqdc55.exe: MD5 Hash: 89a7aa69b37144ade3f
process: ayexd.exe: MD5 Hash: 4d61e928777fa3019da
process: ibdj5zw.exe: MD5 Hash: fb410b70620f6144b2e
process: ahm8.exe: MD5 Hash: 0f14d70c9b194da44f6
process: mxd42m.exe: MD5 Hash: 9b9c2b00490deaf3182
process: zyv5.exe: MD5 Hash: daa67936ccd853bdd90
process: ylf3.exe: MD5 Hash: 354e1ff92de27df7a01
process: nen8n.exe: MD5 Hash: e39952d7526845b192e
process: kgso0a55.exe: MD5 Hash: 1abdabfbc4ac63be17a
process: tafqx5mo.exe: MD5 Hash: 8e2f42d71145049131a
process: xay5.exe: MD5 Hash: 82db33d58994510344d
process: haci5y.exe: MD5 Hash: 13730f877dff41633c1
process: dkp0g.exe: MD5 Hash: 8b9cf5326239274a0d6
process: gnsdk.exe: MD5 Hash: 592d5fef613bbd5357f
process: lcl7.exe: MD5 Hash: d60077a3f62d1516bc7
process: krwh5f.exe: MD5 Hash: bb9b3f6f8d2fa175cca
process: FonWx1Wc.exe: MD5 Hash: 60C0A4B314827685074
process: OkrN0Z44.exe: MD5 Hash: fb66b86f7786d46b67a
process: wditzrpq.exe: MD5 Hash: 24268743a0aab4887f4
process: zxcw.exe: MD5 Hash: ff24257a82838456de2
process: gnsdk.exe: MD5 Hash: bb9b3f6f8d2fa175cca
process: tdel3.exe: MD5 Hash: ffb09af2f30f2324790
process: mtyj62f.exe: MD5 Hash: ff24257a82838456de2
process: mtyj62f.exe: MD5 Hash: 60a5f922641be4db7a5
process: bwd0n.exe: MD5 Hash: 43547630c3552ddbfa2
process: cxe0n.exe: MD5 Hash: 9b9c2b00490deaf3182
process: qzs081b.exe: MD5 Hash: 82db33d58994510344d
process: gfcv7t.exe: MD5 Hash: 24cef11081f9a714792
process: mhok9w3.exe: MD5 Hash: 2c03ed8db62ce7912af
process: mtyj62f.exe: MD5 Hash: 13730f877dff41633c1
process: wjdi.exe: MD5 Hash: 4ccc0ad3c8bfe95c34e
process: cyf0o.exe: MD5 Hash: 06b6556327e03ec362d
process: ikr3.exe: MD5 Hash: bd3675390c44252d068
process: ngioueb0.exe: MD5 Hash: 5cf81c18874b9129c51
process: fvem24v7.exe: MD5 Hash: ff24257a82838456de2
process: fah1q6.exe: MD5 Hash: b089020a3c54f10cb28
process: celb1au0.exe: MD5 Hash: 89a7aa69b37144ade3f
process: ytawj.exe: MD5 Hash: ea4abc0c9c02e73dcb4
process: zgnf.exe: MD5 Hash: d8f7f32d4b7e843aa40
process: ylf4.exe: MD5 Hash: 89a7aa69b37144ade3f
process: pwbm74i.exe: MD5 Hash: de9584fec0761d31aad
process: malprg9.exe: MD5 Hash: 91e17dcc5f21d89ebbe
process: uhs89524.exe: MD5 Hash: 3c1921169cbe3c92316
process: nwve1.exe: MD5 Hash: 75b1f18a272b679f721
process: tovs.exe: MD5 Hash: e357a99903fea548f56
process: zlou4r.exe: MD5 Hash: bb9b3f6f8d2fa175cca
process: jwqvfc.exe: MD5 Hash: 24cef11081f9a714792
process: rbzijq.exe: MD5 Hash: 425c40d6332dd228968
process: wnwewc.exe: MD5 Hash: 798010a00ce899744ac
process: owmq9t0x.exe: MD5 Hash: cc2f298e76603b1f957
process: xlwa.exe: MD5 Hash: 92399b6f2b280e3de28
process: unpv.exe: MD5 Hash: 06b6556327e03ec362d
process: zyv5.exe: MD5 Hash: 3ccec45d7fec9883776
process: tagqxpno.exe: MD5 Hash: 62dc4d8c560e65aae21
process: ezg1p5.exe: MD5 Hash: 98d8824ce47db568d72
process: awczm.exe: MD5 Hash: 9536b35741ed44a1c42
process: kxrwfd1.exe: MD5 Hash: 5ebfddfd920d18008b3
process: qlspba55.exe: MD5 Hash: 5ebfddfd920d18008b3
process: ylwb.exe: MD5 Hash: 89a7aa69b37144ade3f
process: cxe0n.exe: MD5 Hash: e96fe584c4adcb33fcc
process: xjmrkp.exe: MD5 Hash: 63372aa1d81835c9be5
process: xqsx.exe: MD5 Hash: 92399b6f2b280e3de28
process: snurdcq5.exe: MD5 Hash: e115c28df4078cfea9c
process: nwud1.exe: MD5 Hash: de9584fec0761d31aad
process: zvcyl.exe: MD5 Hash: e405bc1f6530e473388
process: elq0i.exe: MD5 Hash: f1c8a8a158aa863d390
process: nuzk63g.exe: MD5 Hash: cdc7d6d2e33df46267c
process: szg9524w.exe: MD5 Hash: 2aade663b1e1226c40b
process: zyv5.exe: MD5 Hash: 1c179122117f0075ef0
process: tafqx5mo.exe: MD5 Hash: 1b18137cba56c5777c7
process: vurk.exe: MD5 Hash: 63372aa1d81835c9be5
process: syf9424v.exe: MD5 Hash: aac7cb913a3130730d6
process: buw1i.exe: MD5 Hash: ab0e84c239bb390fd61
process: zgl8.exe: MD5 Hash: 89a7aa69b37144ade3f
process: nuzk63g.exe: MD5 Hash: 45344ab4bb1c6a649c3
process: nauzigh.exe: MD5 Hash: 9ed6df2b0d8aa091ecc
process: pwbm74i.exe: MD5 Hash: 5cf81c18874b9129c51
process: iufsz6x.exe: MD5 Hash: ff24257a82838456de2
process: dyf0p5.exe: MD5 Hash: a7306d67bdeea14ada7
process: lcl7.exe: MD5 Hash: 3169d8a49dfb0884e3b
process: ipufmd.exe: MD5 Hash: e405bc1f6530e473388
process: tekrmtp.exe: MD5 Hash: a9566c3d943d1b61cd8
process: anh4w.exe: MD5 Hash: 89a7aa69b37144ade3f
process: epanv5.exe: MD5 Hash: ab0e84c239bb390fd61
process: tvi9.exe: MD5 Hash: e115c28df4078cfea9c
process: plso0a55.exe: MD5 Hash: 21d90a52e1858e095cd
process: qxe8l14u.exe: MD5 Hash: fda2f5443b6eb757e3c
process: hqpx.exe: MD5 Hash: 5ebfddfd920d18008b3
process: wprx.exe: MD5 Hash: de9584fec0761d31aad
process: rkmsyif2.exe: MD5 Hash: bd3675390c44252d068
process: pal92yd2.exe: MD5 Hash: 89a7aa69b37144ade3f
process: cpj5y.exe: MD5 Hash: 89a7aa69b37144ade3f
process: rydo84km.exe: MD5 Hash: 9536b35741ed44a1c42
process: ahm9.exe: MD5 Hash: 3c1921169cbe3c92316
process: cxe0n.exe: MD5 Hash: ddc9cefb899eed88981
process: gnsdj.exe: MD5 Hash: 89a7aa69b37144ade3f
process: kgnj8u3.exe: MD5 Hash: bb9b3f6f8d2fa175cca
process: iek277g.exe: MD5 Hash: 82db33d58994510344d
process: snuqdcp5.exe: MD5 Hash: 308eade3a562cb0c5c9
process: jqwg5f.exe: MD5 Hash: 9536b35741ed44a1c42
process: mtyj62f.exe: MD5 Hash: 0610c9496998c59eb3a
process: vchszroq.exe: MD5 Hash: 24cef11081f9a714792
process: ebkfu.exe: MD5 Hash: 43547630c3552ddbfa2
process: tksatz.exe: MD5 Hash: bb9b3f6f8d2fa175cca
process: oub7j0i.exe: MD5 Hash: bb9b3f6f8d2fa175cca
process: tpws.exe: MD5 Hash: e96fe584c4adcb33fcc
process: vmvdvc.exe: MD5 Hash: ff24257a82838456de2
process: hqox.exe: MD5 Hash: 55f31beab2be6cd2c7c
process: okrn0z44.exe: MD5 Hash: cc2f298e76603b1f957
process: blmt6jq.exe: MD5 Hash: fc0c833e1e5c48f0948
process: mztyifg.exe: MD5 Hash: 1b18137cba56c5777c7
process: egnd2cv1.exe: MD5 Hash: 1b18137cba56c5777c7
process: ezg1p5.exe: MD5 Hash: 3ccec45d7fec9883776
process: wjmrj.exe: MD5 Hash: ff24257a82838456de2
process: zyj35w3.exe: MD5 Hash: 5ebfddfd920d18008b3
process: lszrg9f.exe: MD5 Hash: 68d985ebb6f94a86bf5
process: nipm9x4.exe: MD5 Hash: f0b58e8b80763bc5e93
process: edic3k.exe: MD5 Hash: 24cef11081f9a714792
process: g8qfinh.exe: MD5 Hash: fe3c267a2d61a4ce11e
process: mfhntda.exe: MD5 Hash: 4d61e928777fa3019da
process: dudl13u6.exe: MD5 Hash: 84bc05a22f313c1ab84
process: ytawj.exe: MD5 Hash: ff24257a82838456de2
process: rdo0.exe: MD5 Hash: 8094d9164acbb1ddd06
process: reyd5klt.exe: MD5 Hash: 89a7aa69b37144ade3f
process: yyskxx.exe: MD5 Hash: 89a7aa69b37144ade3f
process: qlspba55.exe: MD5 Hash: 606bb53bef6e79aeb1c
process: licript.exe: MD5 Hash: 4e3217d53ef1372459d
process: vhezvvifoglf.exe: MD5 Hash: 8a3787cbb84b4215c28
process: ahm9.exe: MD5 Hash: 55624167309e508505c
process: lxa2yd2c.exe: MD5 Hash: bcb021ba88b98019180
process: zmxc.exe: MD5 Hash: b089020a3c54f10cb28
process: rydo84km.exe: MD5 Hash: 89a7aa69b37144ade3f
process: aozdf.exe: MD5 Hash: ab7668e138a1592b066
process: zbiz0x6.exe: MD5 Hash: 5ebfddfd920d18008b3
process: vqxu.exe: MD5 Hash: 92399b6f2b280e3de28
process: aozdf.exe: MD5 Hash: 0164ae0c5c32bde6978
process: 77e.exe: MD5 Hash: b0da24da8f0d2ec906d
process: krwh5f.exe: MD5 Hash: 98d8824ce47db568d72
process: jai6.exe: MD5 Hash: 89a7aa69b37144ade3f
process: hdk276.exe: MD5 Hash: 425c40d6332dd228968
process: umtpcb55.exe: MD5 Hash: 02e396028d4abb7d9cb
process: xpsx.exe: MD5 Hash: 89a7aa69b37144ade3f
process: uqxt.exe: MD5 Hash: e4e2497dfe7eff96ba3
process: bmnuq3q.exe: MD5 Hash: 89a7aa69b37144ade3f
process: vcjb.exe: MD5 Hash: 354e1ff92de27df7a01
process: pwbm74i.exe: MD5 Hash: 13e91da953cd245b8b0
process: gzb25x.exe: MD5 Hash: ff24257a82838456de2
process: fmrcj.exe: MD5 Hash: 54f0b0c4033165043e5
process: bzfze.exe: MD5 Hash: 15479dc4e051264c57f
process: ufq1.exe: MD5 Hash: 68d985ebb6f94a86bf5
process: gzbh5x.exe: MD5 Hash: 60a5f922641be4db7a5
process: pvc8j1i.exe: MD5 Hash: 24cef11081f9a714792
process: ywcv.exe: MD5 Hash: 0e96b76f84dd69c00c5
process: dmfoj.exe: MD5 Hash: 5ebfddfd920d18008b3
process: dpsy6v9.exe: MD5 Hash: 86edd45c4e4256409f9
process: qlspba55.exe: MD5 Hash: bb9b3f6f8d2fa175cca
process: wurk.exe: MD5 Hash: c68d9a428a53069ade3
process: pwbm73i.exe: MD5 Hash: ff24257a82838456de2
process: pah53p.exe: MD5 Hash: 0ac8a5766c764fffba7
process: pkrn0z44.exe: MD5 Hash: ff24257a82838456de2
process: flskz.exe: MD5 Hash: f1c8a8a158aa863d390
process: legmscz.exe: MD5 Hash: 6db8e8bec39478540ae
process: fmrcj.exe: MD5 Hash: ff24257a82838456de2
process: grcpx5.exe: MD5 Hash: 3c1921169cbe3c92316
process: tovs.exe: MD5 Hash: 9c898171a28fac303ec
process: vedlmu.exe: MD5 Hash: 89a7aa69b37144ade3f
process: jximod.exe: MD5 Hash: e789d73aff8b101ce8f
process: vyw4.exe: MD5 Hash: cc2f298e76603b1f957
process: hotelc.exe: MD5 Hash: 89a7aa69b37144ade3f
process: uagqxpno.exe: MD5 Hash: 856771e36f9c9b8ae60
process: yfk8.exe: MD5 Hash: ff24257a82838456de2
process: mftr.exe: MD5 Hash: 98d8824ce47db568d72
process: fbi1r6.exe: MD5 Hash: 84a7a9eb923f5a8e5a4
process: hyg5h5x7.exe: MD5 Hash: 0a04158bb8d8bcf0f19
process: wcex27.exe: MD5 Hash: bcc0fecd2878fdb3d35
process: mhol9w3.exe: MD5 Hash: 82db33d58994510344d
process: cjp9g.exe: MD5 Hash: da385b9caa444f90c5c
process: uit99525.exe: MD5 Hash: 5e4fa102ee3e75103e5
process: Tarv.exe: MD5 Hash: 4937197e4f45dad34de
process: 9qz2qdq7a.exe: MD5 Hash: cc7c3acd0c01be3b3a8
process: mtyj63f.exe: MD5 Hash: 63ace9c1c7b798853fe
process: gdnhxa.exe: MD5 Hash:
process: zhrcofz.exe: MD5 Hash:
process: wapd25tc.exe: MD5 Hash:
process: hcj2s6.exe: MD5 Hash:
process: f2.exe: MD5 Hash: a4d3337d7a3c4848d8a
process: f2.exe: MD5 Hash: 9f6578742adaed1ea95
process: f9.exe: MD5 Hash: f6471519a734f20e1b8
process: top2.exe: MD5 Hash: 24cc86834a48f634d21
process: rund11.exe: MD5 Hash: c1f24bba58f4d95ce4b
process: top2.exe: MD5 Hash: 0810cb4cc54a2310db7..