Troj/MSIL-KDO exhibits the following characteristics:
File Information
- Size
- 259K
- SHA-1
- 01a46c57176fb6fe8e11d27931f3cd9988299142
- MD5
- 0617afb23e12f7641f236a643d19ec71
- CRC-32
- 53eb80cd
- File type
- Windows executable
- First seen
- 2017-08-03
Runtime Analysis
Dropped Files
- c:\Documents and Settings\test user\Application Data\Microsoft\Protect\S-1-5-21-1202660629-1454471165-1275210071-1003\e6dbc35a-3729-49c5-8afa-f2d1bfcc565b
- Size
- 388
- SHA-1
- e96af16b1b77528e857eb57ba64c943ffda72f86
- MD5
- 22fc89ed8d29309e8b2275ff7bd38403
- CRC-32
- 49475f5d
- File type
- Unspecified binary - probably data
- First seen
- 2017-08-03
- c:\Documents and Settings\test user\Application Data\CF2254\460F75.exe
Modified Files
- %PROFILE%\Application Data\Microsoft\Protect\S-1-5-21-1202660629-1454471165-1275210071-1003\Preferred
- %PROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1202660629-1454471165-1275210071-1003\844641068f15df8c2e25fea3578f59c8_26c19984-2a01-45b5-a7b3-a568af60c200
Processes Created
- c:\windows\microsoft.net\framework\v2.0.50727\installutil.exe
- c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
DNS Requests