This Trojan is designed to steal user passwords. It is a Windows PE EXE file. It is 10,240 bytes in size. It is not packed in any way. It is written in Visual C++.
Installation
Once launched, the Trojan copies itself to the Windows system directory as “winsys.dll”. The Trojan also creates the…
This Trojan is designed to steal confidential data. It is a Windows PE EXE file. The file is 7,680 bytes in size. It is not packed in any way. It is written in C++.
Installation
When launched, the Trojan copies itself to the Windows system directory:
%System%/<trojan_name>.exe
It then…
This Trojan is designed to steal confidential data. It is a Windows PE EXE file. The file is 7,680 bytes in size. It is not packed in any way. It is written in C++.
Installation
When launched, the Trojan copies itself to the Windows system directory:
%System%/<trojan_name>.exe
It then…
This Trojan is designed to steal user passwords. It is a Windows PE EXE file. It is 70,144 bytes in size.
Installation
When launched, the Trojan copies its executable file to the Windows system directory:
%System%\robber1.exe
The Trojan also adds a link to its executable file in the system…
This Trojan program is designed to steal confidential data. It is a Windows PE EXE file, and is 34304 bytes in size. It is packed using a customized packer.
The Trojan copies itself to
%sysdir%\ntos.exe
with system, read only and archive attributes.
When copying it appends random-sized junk to…
This Trojan is a JavaScript scenario. It can be found on web pages. The file is 1,335 bytes in size.
This Trojan program is designed to steal confidential data. It is a Windows PE EXE file, and is 34304 bytes in size. It is packed using a customized packer.
The Trojan copies itself to
%sysdir%\ntos.exe
with system, read only and archive attributes.
When copying it appends random-sized junk to…
This Trojan program makes it possible for a remote malicious user to use the victim machine as a proxy server. It is a Windows PE EXE file. The file is approximately 17KB in size. It is packed using UPack. The unpacked file is approximately 258KB in size.
Installation
Onced launched, the Trojan…
This Trojan is designed to steal confidential information (user passwords). It is designed to steal a range of confidential information.
It is a Windows PE EXE file. It is 25,600 bytes in size. It is packed using UPX. The unpacked file is approximately 250KB in size. It is written in Assembler.
This program is an MS Word document (a DOC file). It is 34,816 bytes in size. It is written in MSWord’s macro language.
This Trojan has a malicious payload. The Trojan is a Windows PE EXE file. It is 4,096 bytes in size.
Installation
When launched, the Trojan copies its executable file to the Windows root directory
:
%WinDir%\memorium.exe
In order to ensure that the Trojan is launched automatically each time…
This Trojan logs the user’s keystrokes. It is a Windows PE EXE file. It is written in Visual C++. The file is 6,144 bytes in size. The file is packed using UPX. The unpacked file is approximately 31KB in size.
Installation
Once launched, the Trojan copies itself to the Windows system…
This Trojan program makes it possible for a remote malicious user to use the victim machine as a proxy server. It is a Windows PE EXE file. The file is approximately 15KB in size. It is written in Visual C++. It is packed using UPack. The unpacked file is approximately 258KB in…
This Trojan tracks the user’s keystrokes, and is designed to steal confidential information. It is a Windows PE EXE file. It is 136,192 bytes in size. It is not packed in any way. It is written in Visual C++.
Installation
When launched, the Trojan displays the following dialogue box:…
This Trojan tracks the user’s keystrokes, and is designed to steal confidential information. It is a Windows PE EXE file. It is 376,832 bytes in size. It is not packed in any way. It is written in Borland Delphi.
Installation
Once launched, the Trojan registers itself in the system registry:…