Examples of Troj/Trackr-AN include:
Example 1
File Information
- Size
- 296K
- SHA-1
- b1983db46e0cb4687e4c55b64c4d8d53551877fa
- MD5
- c86327222d873fb4e12900a5cadcb849
- CRC-32
- 739d4f70
- File type
- Windows executable
- First seen
- 2011-05-13
Runtime Analysis
Copies Itself To
- C:\WINDOWS\system32\wnhelp.exe
Dropped Files
- C:\WINDOWS\system32\perfb419.dat
- Size
- 35
- SHA-1
- 4fa316d71e2be262313fd27cd94bf65cc210219e
- MD5
- e4111f64a4f3c5eda6d260597f49235c
- CRC-32
- 7cd92f8f
- File type
- ASCII text / 8-bit Unicode Transformation Format
- First seen
- 2015-04-08
- C:\WINDOWS\system32\DebugConsole.log
- Size
- 62
- SHA-1
- 33c64166ef327562fcf92f3789c46347ad8310ff
- MD5
- 2f77f6d70d001c49f2a8310d8195387f
- CRC-32
- da016acf
- File type
- Data Log File (generic)
- First seen
- 2015-04-08
- C:\bin\DebugConsole.log
- Size
- 122
- SHA-1
- 18b826445a2cb0c110cd90cc6ec860c54f028f2d
- MD5
- 0aaa991339a0ad081d3a96d9fe7728dc
- CRC-32
- 4c9c98f8
- File type
- Data Log File (generic)
- First seen
- 2015-04-08
Registry Keys Created
- HKLM\SYSTEM\CurrentControlSet\Services\Windows Media Help\Security
- Security
- □□□@□□□□□□□□□□□□□□@□□□□□□□□□□□ □□□□□□□□□□□ □□@□□□□□□□□□□□□□□□□□□□□□□□□□□ □□□□□@□□□□□□□□@□□□□□ □□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□@□□□□□ □□□□□□□□□□□□□□□□□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□□□□0□□□□□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□ □□□□□
- HKLM\SYSTEM\CurrentControlSet\Services\Windows Media Help\Enum
- NextInstance
- 0x00000001
- HKLM\SYSTEM\CurrentControlSet\Services\Windows Media Help
- FailureActions
- □□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□N□□□□
Processes Created
- c:\windows\system32\wnhelp.exe
Example 2
File Information
- File type
- Windows executable
Runtime Analysis
Copies Itself To
- C:\WINDOWS\system32\wnhelp.exe
Dropped Files
- C:\bin\DebugConsole.log
- Size
- 122
- SHA-1
- deb1278f05d7c4a5147046360fa074a2fb313472
- MD5
- 38b47922d31b46ffa44cde7fcae480b6
- CRC-32
- 4b118a62
- File type
- Data Log File (generic)
- First seen
- 2015-04-08
- C:\WINDOWS\system32\perfb419.dat
- Size
- 35
- SHA-1
- 34ed01e41bf9fcb00aa7c9ed3f00ea0134770316
- MD5
- 7a27d6e4fe6479cc4c449c4db8c6d944
- CRC-32
- b44d0c28
- File type
- ASCII text / 8-bit Unicode Transformation Format
- First seen
- 2015-04-08
- C:\WINDOWS\system32\DebugConsole.log
- Size
- 62
- SHA-1
- ebd685945ee35b3f6133541f8e73f88b3e89a149
- MD5
- fc6b6c536c01ef6352c5c00517c9edd2
- CRC-32
- ca4920e4
- File type
- Data Log File (generic)
- First seen
- 2015-04-08
Registry Keys Created
- HKLM\SYSTEM\CurrentControlSet\Services\Windows Media Help
- FailureActions
- □□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□N□□□□
- HKLM\SYSTEM\CurrentControlSet\Services\Windows Media Help\Security
- Security
- □□□@□□□□□□□□□□□□□□@□□□□□□□□□□□ □□□□□□□□□□□ □□@□□□□□□□□□□□□□□□□□□□□□□□□□□ □□□□□@□□□□□□□□@□□□□□ □□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□@□□□□□ □□□□□□□□□□□□□□□□□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□□□□0□□□□□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□ □□□□□
- HKLM\SYSTEM\CurrentControlSet\Services\Windows Media Help\Enum
- NextInstance
- 0x00000001
Processes Created
- c:\windows\system32\wnhelp.exe
Example 3
File Information
- File type
- Windows executable