Troj/DwnLdr-KNF exhibits the following characteristics:
File Information
- Size
- 109K
- SHA-1
- 120f5fe38c7bfbe9c05edcfc205e5eb86fd0c4fa
- MD5
- 1cad44dd0a95858acdb1fb1501848aa0
- CRC-32
- 46cd1fd8
- File type
- Windows executable
- First seen
- 2013-01-20
Runtime Analysis
Registry Keys Created
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run
- (Default)
- c:\test_item.exe
Registry Keys Modified
- HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer
- CleanShutdown
- 0x00000001
HTTP Requests
- http://hmhimnknhp.phonewire.info/get.php
IP Connections
DNS Requests
- hmhimnknhp.phonewire.info