Keyword: sednit
19 Total Search   |   Showing Results : 1 - 19
  
TROJ_SEDNIT.KL
...api-ms-win-samcli-dnsapi-0-0-0.dll - detected as BKDR_SEDNIT.KL%System%\api-ms-win-samcli-dnsapi-0-0-0.dll detected as BKDR_SEDNIT.KL%User Temp%\jhuhugit.temp - will be deleted afterwards(Note...
BKDR_SEDNIT.AE
...Program Files%\Internet Explorer\netidt.dll - detected as BKDR_SEDNIT.AE (for Windows XP and Below)%Application Data%\netids.dll - detected as BKDR_SEDNIT.AE (for Windows Vista and Above)(Note: %Program Files% is the...
BKDR64_SEDNIT.A
...sites.InstallationThis backdoor drops the following files: {dropped file path}\advstorshell.dll - detected as BKDR64_SEDNIT.A%User Temp%\tmp.dat - contains systeminfo results%User Temp%\__4964tmp.dat - contains encryption key{dropped...
BKDR_SEDNIT.KL
...specific information from the affected system. Arrival DetailsThis backdoor may be dropped by the following malware: TROJ_SEDNIT.KLInstallationThis backdoor adds the following mutexes to ensure that only one of its copies runs at any one time: E %pc...
TSPY_SEDNIT.C
...finally pointing to the URL where the exploit is hosted. Another malware, detected as TROJ_DROPPR.CXC then drops this SEDNIT variant that steals system information. To get a one-glance comprehensive view of the behavior of this Spyware, refer to...
TSPY_SEDNIT.B
...following URL: http://{BLOCKED}ecdp.com Trojan:Win32/Dynamer!ac (Microsoft), Artemis!87B22A7F6034 (McAfee), Trojan.Win32.Sednit (Ikarus) Dropped by other malware Collects system information, Connects to URLs/IPs
TSPY_SEDNIT.F
...Server 2012.)It drops and executes the following files: %All Users Profile%\netconman.exe (to be detected as TSPY_SEDNIT.F)(Note: %All Users Profile% is the All Users folder, where it usually is C:\Documents and Settings\All Users...
TROJ_SEDNIT.TOK
...characters} Other DetailsThis Trojan requires the following additional components to properly run: netui.dll Trojan:Win32/Sednit.A (Microsoft), Mal/DwnLdr-X (Sophos) Dropped by other malware Collects system information, Connects to URLs/IPs...
BKDR_SEDNIT.SM
...visiting malicious sites.InstallationThis backdoor drops the following files: %System%\netui.dll - detected as BKDR_SEDNIT.SM(Note: %System% is the Windows system folder, which is usually C:\Windows\System32.)Autostart TechniqueThis...
TROJ_SEDNIT.WVX
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
TSPY_SEDNIT.E
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
TROJ_SEDNIT.WVY
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
TROJ_DROPPR.CXC
...dropper of .DLL file detected as TSPY_SEDNIT.C. To get a one-glance comprehensive...fvecer.bat - used to load TSPY_SEDNIT.C%Application Data%\api-ms-win-downlevel-profile-l1-1-0.dll - detected as TSPY_SEDNIT.C(Note: %User Temp% is the user's...
DDI-RULE-1824
...Related Malware: TROJ_DROPPR.CXC,TSPY_SEDNIT.C NOTES: Attack Phase: Command and Control...AttackAPT Related: YES Description Name: APT - SEDNIT - HTTP (Request) - Variant 4 , Detection Name: HTTP_SEDNIT_REQUEST-4.APT
DDI-RULE-1637
...Status: Enable Event Class: Targeted Attack Event Sub Class: CallbackBehavior Indicator: Targeted AttackAPT Related: YES Description Name: APT - SEDNIT - HTTP (Request) - Variant 3 , Detection Name: HTTP_SEDNIT_REQUEST-3.APT
DDI-RULE-1108
...Default Rule Status: Enable Event Class: Targeted Attack Event Sub Class: CallbackBehavior Indicator: Targeted AttackAPT Related: YES Description Name: APT - SEDNIT - HTTP (Request) - Variant 2 , Detection Name: HTTP_SEDNIT_REQUEST
IOS_XAGENT.A
This iOS malware is related to the SEDNIT malware family. It is specifically designed for espionage on iOS devices. It steasl personal data, records audio, takes screenshots...
JAVA_DLOADR.EFD
...Storm. Once successfully exploited, it downloads another malware detected as TROJ_DROPPR.CXC, which in turn, drops a SEDNIT variant. To get a one-glance comprehensive view of the behavior of this Trojan, refer to the Threat Diagram shown below...
TROJ_ARTIEF.TOK
...grayware or malicious users: InstallationThis Trojan drops the following files: %User Temp%\netids.dll - detected TROJ_SEDNIT.TOK(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name...
19 Total Search   |   Showing Results : 1 - 19