Trojan.MulDrop33.36303

Technical Information

Modifies file system

Creates the following files

<Current directory>\1762094265113.exe
<Current directory>\1762094265684.exe
<Current directory>\1762094266175.exe
<Current directory>\1762094266671.exe
<Current directory>\1762094267183.exe
<Current directory>\1762094267692.exe
<Current directory>\1762094268147.exe
<Current directory>\1762094268633.exe
<Current directory>\1762094269124.exe
<Current directory>\1762094269642.exe
<Current directory>\1762094270159.exe
<Current directory>\1762094270701.exe
<Current directory>\1762094271222.exe
<Current directory>\1762094271756.exe
<Current directory>\1762094272270.exe
<Current directory>\1762094272799.exe
<Current directory>\1762094273296.exe
<Current directory>\1762094273802.exe
<Current directory>\1762094274323.exe
<Current directory>\1762094274822.exe
<Current directory>\1762094275342.exe
<Current directory>\1762094275852.exe
<Current directory>\1762094276341.exe
<Current directory>\1762094276803.exe
<Current directory>\1762094277303.exe
<Current directory>\1762094277803.exe
<Current directory>\1762094278291.exe
<Current directory>\1762094278769.exe
<Current directory>\1762094279305.exe
<Current directory>\1762094279826.exe
<Current directory>\1762094280387.exe
<Current directory>\1762094280953.exe
<Current directory>\1762094281482.exe
<Current directory>\1762094282051.exe
<Current directory>\1762094282614.exe
<Current directory>\1762094283181.exe
<Current directory>\1762094283744.exe
<Current directory>\1762094284294.exe
<Current directory>\1762094284808.exe
<Current directory>\1762094285363.exe
<Current directory>\1762094285928.exe
<Current directory>\1762094286443.exe
<Current directory>\1762094286960.exe
<Current directory>\1762094287469.exe
<Current directory>\1762094287977.exe
<Current directory>\1762094288508.exe
<Current directory>\1762094289022.exe
<Current directory>\1762094289554.exe
<Current directory>\1762094290084.exe
<Current directory>\1762094290635.exe
<Current directory>\1762094291153.exe
<Current directory>\1762094291686.exe
<Current directory>\1762094292268.exe
<Current directory>\1762094292819.exe
<Current directory>\1762094293374.exe
<Current directory>\1762094293934.exe
<Current directory>\1762094294538.exe
<Current directory>\1762094295104.exe
<Current directory>\1762094295690.exe
<Current directory>\1762094296266.exe
<Current directory>\1762094296831.exe
<Current directory>\1762094297388.exe
<Current directory>\1762094297944.exe
<Current directory>\1762094298499.exe
<Current directory>\1762094299066.exe
<Current directory>\1762094299626.exe
<Current directory>\1762094300191.exe
<Current directory>\1762094300732.exe
<Current directory>\1762094301280.exe
<Current directory>\1762094301850.exe
<Current directory>\1762094302408.exe
<Current directory>\1762094302973.exe
<Current directory>\1762094303541.exe
<Current directory>\1762094304091.exe
<Current directory>\1762094304660.exe
<Current directory>\1762094305231.exe
<Current directory>\1762094305825.exe
<Current directory>\1762094306414.exe
<Current directory>\1762094307055.exe
<Current directory>\1762094307701.exe
<Current directory>\1762094308367.exe
<Current directory>\1762094309044.exe
<Current directory>\1762094309728.exe
<Current directory>\1762094310425.exe
<Current directory>\1762094311121.exe
<Current directory>\1762094311819.exe
<Current directory>\1762094312505.exe
<Current directory>\1762094313194.exe
<Current directory>\1762094313871.exe
<Current directory>\1762094314585.exe
<Current directory>\1762094315379.exe
<Current directory>\1762094316002.exe
<Current directory>\1762094316655.exe
<Current directory>\1762094317264.exe
<Current directory>\1762094317891.exe
<Current directory>\1762094318546.exe
<Current directory>\1762094319301.exe
<Current directory>\1762094319960.exe
<Current directory>\1762094320593.exe
<Current directory>\1762094321355.exe
<Current directory>\1762094321989.exe
<Current directory>\1762094322609.exe
<Current directory>\1762094323265.exe
<Current directory>\1762094323898.exe
<Current directory>\1762094324531.exe
<Current directory>\1762094325117.exe
<Current directory>\1762094325727.exe
<Current directory>\1762094326361.exe
<Current directory>\1762094327002.exe
<Current directory>\1762094327631.exe
<Current directory>\1762094328243.exe
<Current directory>\1762094328867.exe
<Current directory>\1762094329478.exe
<Current directory>\1762094330103.exe
<Current directory>\1762094330717.exe
<Current directory>\1762094331337.exe
<Current directory>\1762125587166.exe
<Current directory>\1762125587801.exe
<Current directory>\1762125588462.exe
<Current directory>\1762125589107.exe
<Current directory>\1762125589747.exe
<Current directory>\1762125590390.exe
<Current directory>\1762125591071.exe
<Current directory>\1762125591720.exe
<Current directory>\1762125592354.exe
<Current directory>\1762125592992.exe
<Current directory>\1762125593601.exe
<Current directory>\1762125594241.exe
<Current directory>\1762125594872.exe
<Current directory>\1762125595521.exe
<Current directory>\1762125596151.exe
<Current directory>\1762125596842.exe
<Current directory>\1762125597477.exe
<Current directory>\1762125598133.exe
<Current directory>\1762125598759.exe
<Current directory>\1762125599388.exe
<Current directory>\1762125600023.exe
<Current directory>\1762125600658.exe
<Current directory>\1762125601291.exe
<Current directory>\1762125601936.exe
<Current directory>\1762125602600.exe
<Current directory>\1762125603258.exe
<Current directory>\1762125603922.exe
<Current directory>\1762125604583.exe
<Current directory>\1762125605292.exe
<Current directory>\1762125605979.exe
<Current directory>\1762125606665.exe
<Current directory>\1762125607348.exe
<Current directory>\1762125608073.exe
<Current directory>\1762125608769.exe
<Current directory>\1762125609492.exe
<Current directory>\1762125610200.exe
<Current directory>\1762125610974.exe
<Current directory>\1762125611770.exe
<Current directory>\1762125612528.exe
<Current directory>\1762125613276.exe
<Current directory>\1762125614019.exe
<Current directory>\1762125614741.exe
<Current directory>\1762125615467.exe
<Current directory>\1762125616195.exe
<Current directory>\1762125616938.exe
<Current directory>\1762125617660.exe
<Current directory>\1762125618389.exe
<Current directory>\1762125619116.exe
<Current directory>\1762125619847.exe
<Current directory>\1762125620591.exe

Deletes following files that it created itself

<Current directory>\1762094265113.exe
<Current directory>\1762094265684.exe
<Current directory>\1762094266175.exe
<Current directory>\1762094266671.exe
<Current directory>\1762094267183.exe
<Current directory>\1762094267692.exe
<Current directory>\1762094268147.exe
<Current directory>\1762094268633.exe
<Current directory>\1762094269124.exe
<Current directory>\1762094269642.exe
<Current directory>\1762094270159.exe
<Current directory>\1762094270701.exe
<Current directory>\1762094271222.exe
<Current directory>\1762094271756.exe
<Current directory>\1762094272270.exe
<Current directory>\1762094272799.exe
<Current directory>\1762094273296.exe
<Current directory>\1762094273802.exe
<Current directory>\1762094274323.exe
<Current directory>\1762094274822.exe
<Current directory>\1762094275342.exe
<Current directory>\1762094275852.exe
<Current directory>\1762094276341.exe
<Current directory>\1762094276803.exe
<Current directory>\1762094277303.exe
<Current directory>\1762094277803.exe
<Current directory>\1762094278291.exe
<Current directory>\1762094278769.exe
<Current directory>\1762094279305.exe
<Current directory>\1762094279826.exe
<Current directory>\1762094280387.exe
<Current directory>\1762094280953.exe
<Current directory>\1762094281482.exe
<Current directory>\1762094282051.exe
<Current directory>\1762094282614.exe
<Current directory>\1762094283181.exe
<Current directory>\1762094283744.exe
<Current directory>\1762094284294.exe
<Current directory>\1762094284808.exe
<Current directory>\1762094285363.exe
<Current directory>\1762094285928.exe
<Current directory>\1762094286443.exe
<Current directory>\1762094286960.exe
<Current directory>\1762094287469.exe
<Current directory>\1762094287977.exe
<Current directory>\1762094288508.exe
<Current directory>\1762094289022.exe
<Current directory>\1762094289554.exe
<Current directory>\1762094290084.exe
<Current directory>\1762094290635.exe
<Current directory>\1762094291153.exe
<Current directory>\1762094291686.exe
<Current directory>\1762094292268.exe
<Current directory>\1762094292819.exe
<Current directory>\1762094293374.exe
<Current directory>\1762094293934.exe
<Current directory>\1762094294538.exe
<Current directory>\1762094295104.exe
<Current directory>\1762094295690.exe
<Current directory>\1762094296266.exe
<Current directory>\1762094296831.exe
<Current directory>\1762094297388.exe
<Current directory>\1762094297944.exe
<Current directory>\1762094298499.exe
<Current directory>\1762094299066.exe
<Current directory>\1762094299626.exe
<Current directory>\1762094300191.exe
<Current directory>\1762094300732.exe
<Current directory>\1762094301280.exe
<Current directory>\1762094301850.exe
<Current directory>\1762094302408.exe
<Current directory>\1762094302973.exe
<Current directory>\1762094303541.exe
<Current directory>\1762094304091.exe
<Current directory>\1762094304660.exe
<Current directory>\1762094305231.exe
<Current directory>\1762094305825.exe
<Current directory>\1762094306414.exe
<Current directory>\1762094307055.exe
<Current directory>\1762094307701.exe
<Current directory>\1762094308367.exe
<Current directory>\1762094309044.exe
<Current directory>\1762094309728.exe
<Current directory>\1762094310425.exe
<Current directory>\1762094311121.exe
<Current directory>\1762094311819.exe
<Current directory>\1762094312505.exe
<Current directory>\1762094313194.exe
<Current directory>\1762094313871.exe
<Current directory>\1762094314585.exe
<Current directory>\1762094315379.exe
<Current directory>\1762094316002.exe
<Current directory>\1762094316655.exe
<Current directory>\1762094317264.exe
<Current directory>\1762094317891.exe
<Current directory>\1762094318546.exe
<Current directory>\1762094319301.exe
<Current directory>\1762094319960.exe
<Current directory>\1762094320593.exe
<Current directory>\1762094321355.exe
<Current directory>\1762094321989.exe
<Current directory>\1762094322609.exe
<Current directory>\1762094323265.exe
<Current directory>\1762094323898.exe
<Current directory>\1762094324531.exe
<Current directory>\1762094325117.exe
<Current directory>\1762094325727.exe
<Current directory>\1762094326361.exe
<Current directory>\1762094327002.exe
<Current directory>\1762094327631.exe
<Current directory>\1762094328243.exe
<Current directory>\1762094328867.exe
<Current directory>\1762094329478.exe
<Current directory>\1762094330103.exe
<Current directory>\1762094330717.exe
<Current directory>\1762094331337.exe
<Current directory>\1762125587166.exe
<Current directory>\1762125587801.exe
<Current directory>\1762125588462.exe
<Current directory>\1762125589107.exe
<Current directory>\1762125589747.exe
<Current directory>\1762125590390.exe
<Current directory>\1762125591071.exe
<Current directory>\1762125591720.exe
<Current directory>\1762125592354.exe
<Current directory>\1762125592992.exe
<Current directory>\1762125593601.exe
<Current directory>\1762125594241.exe
<Current directory>\1762125594872.exe
<Current directory>\1762125595521.exe
<Current directory>\1762125596151.exe
<Current directory>\1762125596842.exe
<Current directory>\1762125597477.exe
<Current directory>\1762125598133.exe
<Current directory>\1762125598759.exe
<Current directory>\1762125599388.exe
<Current directory>\1762125600023.exe
<Current directory>\1762125600658.exe
<Current directory>\1762125601291.exe
<Current directory>\1762125601936.exe
<Current directory>\1762125602600.exe
<Current directory>\1762125603258.exe
<Current directory>\1762125603922.exe
<Current directory>\1762125604583.exe
<Current directory>\1762125605292.exe
<Current directory>\1762125605979.exe
<Current directory>\1762125606665.exe
<Current directory>\1762125607348.exe
<Current directory>\1762125608073.exe
<Current directory>\1762125608769.exe
<Current directory>\1762125609492.exe
<Current directory>\1762125610200.exe
<Current directory>\1762125610974.exe
<Current directory>\1762125611770.exe
<Current directory>\1762125612528.exe
<Current directory>\1762125613276.exe
<Current directory>\1762125614019.exe
<Current directory>\1762125614741.exe
<Current directory>\1762125615467.exe
<Current directory>\1762125616195.exe
<Current directory>\1762125616938.exe
<Current directory>\1762125617660.exe
<Current directory>\1762125618389.exe
<Current directory>\1762125619116.exe
<Current directory>\1762125619847.exe
<Current directory>\1762125620591.exe

Deletes itself.

Network activity

Connects to

'co##############e-chains.prod.autograph.services.mozaws.net':443

UDP

DNS ASK co##############e-chains.prod.autograph.services.mozaws.net

Miscellaneous

Creates and executes the following

'<Current directory>\1762094265113.exe'
'<Current directory>\1762094265684.exe'
'<Current directory>\1762094266175.exe'
'<Current directory>\1762094266671.exe'
'<Current directory>\1762094267183.exe'
'<Current directory>\1762094267692.exe'
'<Current directory>\1762094268147.exe'
'<Current directory>\1762094268633.exe'
'<Current directory>\1762094269124.exe'
'<Current directory>\1762094269642.exe'
'<Current directory>\1762094270159.exe'
'<Current directory>\1762094270701.exe'
'<Current directory>\1762094271222.exe'
'<Current directory>\1762094271756.exe'
'<Current directory>\1762094272270.exe'
'<Current directory>\1762094272799.exe'
'<Current directory>\1762094273296.exe'
'<Current directory>\1762094273802.exe'
'<Current directory>\1762094274323.exe'
'<Current directory>\1762094274822.exe'
'<Current directory>\1762094275342.exe'
'<Current directory>\1762094275852.exe'
'<Current directory>\1762094276341.exe'
'<Current directory>\1762094276803.exe'
'<Current directory>\1762094277303.exe'
'<Current directory>\1762094277803.exe'
'<Current directory>\1762094278291.exe'
'<Current directory>\1762094278769.exe'
'<Current directory>\1762094279305.exe'
'<Current directory>\1762094279826.exe'
'<Current directory>\1762094280387.exe'
'<Current directory>\1762094280953.exe'
'<Current directory>\1762094281482.exe'
'<Current directory>\1762094282051.exe'
'<Current directory>\1762094282614.exe'
'<Current directory>\1762094283181.exe'
'<Current directory>\1762094283744.exe'
'<Current directory>\1762094284294.exe'
'<Current directory>\1762094284808.exe'
'<Current directory>\1762094285363.exe'
'<Current directory>\1762094285928.exe'
'<Current directory>\1762094286443.exe'
'<Current directory>\1762094286960.exe'
'<Current directory>\1762094287469.exe'
'<Current directory>\1762094287977.exe'
'<Current directory>\1762094288508.exe'
'<Current directory>\1762094289022.exe'
'<Current directory>\1762094289554.exe'
'<Current directory>\1762094290084.exe'
'<Current directory>\1762094290635.exe'
'<Current directory>\1762094291153.exe'
'<Current directory>\1762094291686.exe'
'<Current directory>\1762094292268.exe'
'<Current directory>\1762094292819.exe'
'<Current directory>\1762094293374.exe'
'<Current directory>\1762094293934.exe'
'<Current directory>\1762094294538.exe'
'<Current directory>\1762094295104.exe'
'<Current directory>\1762094295690.exe'
'<Current directory>\1762094296266.exe'
'<Current directory>\1762094296831.exe'
'<Current directory>\1762094297388.exe'
'<Current directory>\1762094297944.exe'
'<Current directory>\1762094298499.exe'
'<Current directory>\1762094299066.exe'
'<Current directory>\1762094299626.exe'
'<Current directory>\1762094300191.exe'
'<Current directory>\1762094300732.exe'
'<Current directory>\1762094301280.exe'
'<Current directory>\1762094301850.exe'
'<Current directory>\1762094302408.exe'
'<Current directory>\1762094302973.exe'
'<Current directory>\1762094303541.exe'
'<Current directory>\1762094304091.exe'
'<Current directory>\1762094304660.exe'
'<Current directory>\1762094305231.exe'
'<Current directory>\1762094305825.exe'
'<Current directory>\1762094306414.exe'
'<Current directory>\1762094307055.exe'
'<Current directory>\1762094307701.exe'
'<Current directory>\1762094308367.exe'
'<Current directory>\1762094309044.exe'
'<Current directory>\1762094309728.exe'
'<Current directory>\1762094310425.exe'
'<Current directory>\1762094311121.exe'
'<Current directory>\1762094311819.exe'
'<Current directory>\1762094312505.exe'
'<Current directory>\1762094313194.exe'
'<Current directory>\1762094313871.exe'
'<Current directory>\1762094314585.exe'
'<Current directory>\1762094315379.exe'
'<Current directory>\1762094316002.exe'
'<Current directory>\1762094316655.exe'
'<Current directory>\1762094317264.exe'
'<Current directory>\1762094317891.exe'
'<Current directory>\1762094318546.exe'
'<Current directory>\1762094319301.exe'
'<Current directory>\1762094319960.exe'
'<Current directory>\1762094320593.exe'
'<Current directory>\1762094321355.exe'
'<Current directory>\1762094321989.exe'
'<Current directory>\1762094322609.exe'
'<Current directory>\1762094323265.exe'
'<Current directory>\1762094323898.exe'
'<Current directory>\1762094324531.exe'
'<Current directory>\1762094325117.exe'
'<Current directory>\1762094325727.exe'
'<Current directory>\1762094326361.exe'
'<Current directory>\1762094327002.exe'
'<Current directory>\1762094327631.exe'
'<Current directory>\1762094328243.exe'
'<Current directory>\1762094328867.exe'
'<Current directory>\1762094329478.exe'
'<Current directory>\1762094330103.exe'
'<Current directory>\1762094330717.exe'
'<Current directory>\1762094331337.exe'
'<Current directory>\1762125587166.exe'
'<Current directory>\1762125587801.exe'
'<Current directory>\1762125588462.exe'
'<Current directory>\1762125589107.exe'
'<Current directory>\1762125589747.exe'
'<Current directory>\1762125590390.exe'
'<Current directory>\1762125591071.exe'
'<Current directory>\1762125591720.exe'
'<Current directory>\1762125592354.exe'
'<Current directory>\1762125592992.exe'
'<Current directory>\1762125593601.exe'
'<Current directory>\1762125594241.exe'
'<Current directory>\1762125594872.exe'
'<Current directory>\1762125595521.exe'
'<Current directory>\1762125596151.exe'
'<Current directory>\1762125596842.exe'
'<Current directory>\1762125597477.exe'
'<Current directory>\1762125598133.exe'
'<Current directory>\1762125598759.exe'
'<Current directory>\1762125599388.exe'
'<Current directory>\1762125600023.exe'
'<Current directory>\1762125600658.exe'
'<Current directory>\1762125601291.exe'
'<Current directory>\1762125601936.exe'
'<Current directory>\1762125602600.exe'
'<Current directory>\1762125603258.exe'
'<Current directory>\1762125603922.exe'
'<Current directory>\1762125604583.exe'
'<Current directory>\1762125605292.exe'
'<Current directory>\1762125605979.exe'
'<Current directory>\1762125606665.exe'
'<Current directory>\1762125607348.exe'
'<Current directory>\1762125608073.exe'
'<Current directory>\1762125608769.exe'
'<Current directory>\1762125609492.exe'
'<Current directory>\1762125610200.exe'
'<Current directory>\1762125610974.exe'
'<Current directory>\1762125611770.exe'
'<Current directory>\1762125612528.exe'
'<Current directory>\1762125613276.exe'
'<Current directory>\1762125614019.exe'
'<Current directory>\1762125614741.exe'
'<Current directory>\1762125615467.exe'
'<Current directory>\1762125616195.exe'
'<Current directory>\1762125616938.exe'
'<Current directory>\1762125617660.exe'
'<Current directory>\1762125618389.exe'
'<Current directory>\1762125619116.exe'
'<Current directory>\1762125619847.exe'
'<Current directory>\1762125620591.exe'

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial