Examples of Troj/Tosct-B include:
Example 1
File Information
- Size
- 6.5K
- SHA-1
- 1571105b3fcbc117dd7c9308286af30d34787a92
- MD5
- 13f0b56c28995e4efc8da784ad862853
- CRC-32
- 405232a0
- File type
- Windows executable
- First seen
- 2011-08-10
Runtime Analysis
Registry Keys Created
- HKLM\SYSTEM\CurrentControlSet\Services\tcpguard\Enum
- NextInstance
- 0x00000001
- HKLM\SYSTEM\CurrentControlSet\Services\tcpguard\Security
- Security
- □□□@□□□□□□□□□□□□□□@□□□□□□□□□□□ □□□□□□□□□□□ □□@□□□□□□□□□□□□□□□□□□□□□□□□□□ □□□□□@□□□□□□□□@□□□□□ □□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□@□□□□□ □□□□□□□□□□□□□□□□□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□□□□0□□□□□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□ □□□□□
- HKLM\SYSTEM\CurrentControlSet\Services\tcpguard
- Description
- provide protection from attack of remote invader, associating with Windows FireWall.
Example 2
File Information
- File type
- Windows executable
Runtime Analysis
HTTP Requests
- http://www.deebeedesigns.ca/_borders/top.htm
DNS Requests
Example 3
File Information
- Size
- 9.5K
- SHA-1
- 364833dbcbd261eca3fb71e596488a6bc93e69ac
- MD5
- f1e5d9bf7705b4dc5be0b8a90b73a863
- CRC-32
- 8e57f5cd
- File type
- Windows executable
- First seen
- 2011-07-20
Runtime Analysis
HTTP Requests
- http://70.62.232.98/Default.aspx
IP Connections