Troj/Dorkbot-AO

Category: Viruses and Spyware Protection available since:16 Dec 2011 16:44:51 (GMT)
Type: Trojan Last Updated:31 Jul 2013 23:57:43 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Examples of Troj/Dorkbot-AO include:

Example 1

File Information

Size
152K
SHA-1
0529524dc98cccaf26dd636fda25636c6d9d09bc
MD5
868256ed0f87d58d4bb8d2f2279a8895
CRC-32
d7db1d83
File type
application/x-ms-dos-executable
First seen
2011-09-22

Runtime Analysis

HTTP Requests
  • http://api.wipmania.com/
DNS Requests
  • api.wipmania.com
  • negro001.com
  • negro002.com
  • negro003.com

Example 2

File Information

Size
152K
SHA-1
1de15ddd3e1af2bed36ff7d1e584c68258c2db05
MD5
ccb3bbba6ec95410405ac2053e387473
CRC-32
18c02205
File type
application/x-ms-dos-executable
First seen
2011-12-08

Other vendor detection

Kaspersky
Trojan.Win32.Inject.bzuo

Runtime Analysis

HTTP Requests
  • http://api.wipmania.com/
DNS Requests
  • api.wipmania.com
  • negro004.com
  • negro0045.com
  • negro005.com

Example 3

File Information

Size
152K
SHA-1
2676ab2548bfa76321c1f7dbe0d91202aacdfc41
MD5
b6caf5851fd5e75b495a0286421ff100
CRC-32
d20db7a9
File type
application/x-ms-dos-executable
First seen
2011-08-03

Runtime Analysis

HTTP Requests
  • http://api.wipmania.com/
DNS Requests
  • api.wipmania.com
  • thismynew.info
  • thismynew1.info
  • thismynew2.info

download Try Sophos products for free
Download now