Technical Details

This Trojan spy program is designed to steal confidential user data and remotely manage the victim machine. It is a Windows PE EXE file. It is 470 bytes in size.

Installation

When launched, the Trojan creates the following file:

%AppData%\<name>.exe

<name&gr; is chosen at random from the list below:

dumpreport
msiexeca
svchosts
upnpsvc
service
taskmon
rundll
helper
event
logon
sound
lsas