HLLC_APOCALIPS.A

 Analysis by: Roland Marco Dela Paz

 ALIASES:

Virus.DOS.HLLC.Apocalipse.a(Kaspersky); BAT/Apocalipse (exact)(F-Prot)

 PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan copies a file named C:\B{digit}000.DAS as C:\B{digit}000.EXE. It then executes the copy, C:\B{digit}000.EXE, and then deletes it afterwards.

This Trojan may be dropped by other malware.

It requires its main component to successfully perform its intended routine.

  TECHNICAL DETAILS

File Size:

Varies

File Type:

BAT

Initial Samples Received Date:

17 Dec 2001

Arrival Details

This Trojan may be dropped by other malware.

Other Details

This Trojan requires its main component to successfully perform its intended routine.

NOTES:
It copies a file named C:\B{digit}000.DAS as C:\B{digit}000.EXE. It then executes the copy, C:\B{digit}000.EXE, and then deletes it afterwards.