TROJ_TALERET.DLR
TrojanDownloader:Win32/Taleret.D(Microsoft), Downloader.a!c2h(McAfee), Virus.PSW.OnlineGames(Ikarus), a variant of Win32/TrojanDownloader.Taleret.A trojan(Eset)
Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan may arrive bundled with malware packages as a malware component. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It may be dropped by other malware.
TECHNICAL DETAILS
107,520 bytes
DLL
Yes
13 Nov 2012
Arrival Details
This Trojan may arrive bundled with malware packages as a malware component.
It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
It may be dropped by other malware.
Installation
This Trojan drops the following files:
- %System%\rundll32.exe.xxt
(Note: %System% is the Windows system folder, which is usually C:\Windows\System32.)
Other Details
This Trojan connects to the following possibly malicious URL:
- http://{BLOCKED}.{BLOCKED}.202.109:443/csfwj.asp?01681262934084
- http://{BLOCKED}.{BLOCKED}.119.226:443/uhjqm.asp?01791381718607
- http://{BLOCKED}a.{BLOCKED}gcrab.com:443/rpykt.asp?05261456562602
- http://{BLOCKED}a.{BLOCKED}gcrab.com/evhif.asp?04381478978898