W32/Dorkbot-EK

Category: Viruses and Spyware Protection available since:27 Feb 2013 20:52:48 (GMT)
Type: Win32 worm Last Updated:27 Feb 2013 20:52:48 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Examples of W32/Dorkbot-EK include:

Example 1

File Information

Size
513K
SHA-1
08a965a46e11ea0f0be5c0f08f89e1b86c64e011
MD5
cf3028316e0c7d3a92a370a6239ff157
CRC-32
4c945d79
File type
Windows executable
First seen
2013-01-31

Runtime Analysis

HTTP Requests
  • http://api.wipmania.com/
DNS Requests
  • 1n1.mooo.com
  • 1n12.hopto.org
  • api.wipmania.com
  • jma1.biz

Example 2

File Information

Size
409K
SHA-1
2295ab7f5cfdbb613384739a6e57cc1cf74bd586
MD5
36d200a09f0c454b516d57e5548cc5cd
CRC-32
1cc9172a
File type
Windows executable
First seen
2013-01-21

Runtime Analysis

HTTP Requests
  • http://api.wipmania.com/
DNS Requests
  • 1n1.mooo.com
  • 1n12.hopto.org
  • api.wipmania.com
  • jma1.biz

Example 3

File Information

Size
180K
SHA-1
91991473cce7f3cb0a0062198c8c8c69f654cfc0
MD5
b324abab3b408cf730e380c8df116013
CRC-32
f6dc0983
File type
Windows executable
First seen
2012-12-16

Runtime Analysis

Processes Created
  • c:\windows\system32\ipconfig.exe
HTTP Requests
  • http://api.wipmania.com/
DNS Requests
  • api.wipmania.com
  • p.nesbits.biz
  • p.nesbits.biz.ua

download Try Sophos products for free
Download now