W32/Stuxnet-B

Category: Viruses and Spyware Protection available since:15 Jul 2010 10:48:56 (GMT)
Type: Win32 worm Last Updated:08 Mar 2011 14:22:06 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Summary

W32/Stuxnet-B is a worm for the Windows platform.

Detailed analysis

Example behaviors of W32/Stuxnet-B follow:

Example 1

File Information

Size
502K
SHA-1
4affe9ab7d79e53089fb0d89eac494920c771b0f
MD5
97fd438f25a49241405820fe40197005
CRC-32
1cff7319
File type
application/x-ms-dos-executable
First seen
2010-06-21

Other vendor detection

Avira
TR/Stuxnet.l
Kaspersky
Trojan-Dropper.Win32.Stuxnet.a

Runtime Analysis

DNS Requests
  • www.windowsupdate.com

Example 2

File Information

Size
10K
SHA-1
498fec221da64e8314eac825b56f525bb569f4cb
MD5
c1cb4117d9998c79ae10c1b890c23a4d
CRC-32
dcfa6b32
File type
application/x-ms-dos-executable
First seen
2010-07-16

Other vendor detection

Avira
Worm/Stuxnet.A.9
Kaspersky
Worm.Win32.Stuxnet.a

Example 3

File Information

Size
291K
SHA-1
4d64a8a72aaf82b7f85cd404385db961ef7aeb8f
MD5
789f6f8de3f140cf5d73bef0b8abaf78
CRC-32
6198df34
File type
application/x-ms-dos-executable
First seen
2010-07-15

download Try Sophos products for free
Download now