Trojan.DownLoader45.772

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%APPDATA%\microsoft\windows\start menu\programs\startup\asupen.exe

Modifies file system

Deletes itself.

Network activity

Connects to

'smtp.yandex.ru':587
'91.##5.35.237':25
'91.##5.35.246':587
'91.##5.35.245':587
'91.##5.35.229':25
'91.##5.35.244':587
'91.##5.35.204':25
'91.##5.35.243':587
'91.##5.35.203':25
'87.##6.193.1':587
'91.##5.35.242':587
'91.##5.35.241':587
'91.##5.35.202':25
'91.##5.35.200':25
'91.##5.35.240':587
'91.##5.35.239':587
'91.##5.35.199':25
'91.##5.35.238':587
'91.##5.35.237':587
'91.##5.35.247':587
'91.##5.35.248':587
'91.##5.35.219':25
'91.##5.35.235':587
'91.##5.35.206':25
'87.##6.193.0':587
'91.##5.35.218':25
'91.##5.35.255':587
'91.##5.35.216':25
'91.##5.35.253':587
'91.##5.35.215':25
'91.##5.35.254':587
'91.##5.35.252':587
'91.##5.35.212':25
'91.##5.35.241':25
'91.##5.35.211':25
'91.##5.35.209':25
'91.##5.35.210':25
'91.##5.35.251':587
'91.##5.35.208':25
'91.##5.35.207':25
'91.##5.35.250':587
'91.##5.35.249':587
'91.##5.35.236':587
'91.##5.35.176':587
'91.##5.35.201':25
'91.##5.35.234':587
'91.##5.35.186':25
'91.##5.35.217':587
'91.##5.35.184':25
'91.##5.35.221':587
'91.##5.35.220':587
'91.##5.35.219':587
'91.##5.35.183':25
'91.##5.35.218':587
'91.##5.35.222':587
'91.##5.35.182':25
'91.##5.35.216':587
'91.##5.35.214':25
'91.##5.35.181':25
'91.##5.35.180':25
'91.##5.35.215':587
'91.##5.35.214':587
'91.##5.35.213':587
'91.##5.35.212':587
'91.##5.35.213':25
'91.##5.35.196':25
'91.##5.35.233':587
'91.##5.35.223':587
'91.##5.35.232':587
'91.##5.35.185':25
'91.##5.35.231':587
'91.##5.35.230':587
'91.##5.35.195':25
'91.##5.35.229':587
'91.##5.35.228':587
'91.##5.35.192':25
'91.##5.35.227':587
'91.##5.35.191':25
'91.##5.35.190':25
'91.##5.35.226':587
'91.##5.35.221':25
'91.##5.35.217':25
'91.##5.35.225':587
'91.##5.35.224':587
'91.##5.35.189':25
'91.##5.35.188':25
'91.##5.35.187':25
'91.##5.35.220':25
'87.##6.193.2':587
'87.##6.193.0':25
'87.##6.193.15':587
'87.##6.193.2':25
'87.##6.193.35':587
'87.##6.193.34':587
'91.##5.35.255':25
'87.##6.193.33':587
'91.##5.35.253':25
'87.##6.193.32':587
'91.##5.35.254':25
'87.##6.193.3':587
'87.##6.193.36':587
'87.##6.193.30':587
'91.##5.35.251':25
'87.##6.193.29':587
'87.##6.193.28':587
'87.##6.193.27':587
'87.##6.193.26':587
'91.##5.35.250':25
'87.##6.193.25':587
'91.##5.35.252':25
'87.##6.193.1':25
'87.##6.193.13':25
'91.##5.35.248':25
'87.##6.193.45':587
'87.##6.193.44':587
'87.##6.193.12':25
'87.##6.193.11':25
'87.##6.193.43':587
'87.##6.193.10':25
'87.##6.193.42':587
'87.##6.193.9':25
'87.##6.193.41':587
'87.##6.193.7':25
'87.##6.193.8':25
'87.##6.193.40':587
'87.##6.193.39':587
'87.##6.193.6':25
'87.##6.193.38':587
'87.##6.193.5':25
'87.##6.193.4':25
'87.##6.193.3':25
'87.##6.193.24':587
'87.##6.193.31':587
'87.##6.193.37':587
'91.##5.35.247':25
'91.##5.35.246':25
'91.##5.35.230':25
'87.##6.193.9':587
'87.##6.193.13':587
'91.##5.35.227':25
'87.##6.193.12':587
'87.##6.193.11':587
'91.##5.35.226':25
'87.##6.193.10':587
'91.##5.35.225':25
'91.##5.35.224':25
'87.##6.193.8':587
'91.##5.35.210':587
'87.##6.193.7':587
'91.##5.35.223':25
'91.##5.35.222':25
'87.##6.193.6':587
'87.##6.193.5':587
'87.##6.193.4':587
'91.##5.35.249':25
'87.##6.193.16':587
'91.##5.35.211':587
'91.##5.35.245':25
'91.##5.35.232':25
'87.##6.193.14':587
'91.##5.35.228':25
'91.##5.35.244':25
'91.##5.35.243':25
'87.##6.193.23':587
'87.##6.193.22':587
'91.##5.35.242':25
'87.##6.193.21':587
'87.##6.193.20':587
'91.##5.35.240':25
'87.##6.193.19':587
'91.##5.35.239':25
'87.##6.193.18':587
'87.##6.193.17':587
'91.##5.35.238':25
'91.##5.35.236':25
'91.##5.35.235':25
'91.##5.35.234':25
'91.##5.35.233':25
'91.##5.35.231':25
'91.##5.35.205':25
'91.##5.35.209':587
'91.##5.35.179':25
'91.##5.35.122':25
'91.##5.35.147':587
'91.##5.35.151':587
'91.##5.35.119':25
'91.##5.35.138':25
'91.##5.35.150':587
'91.##5.35.149':587
'91.##5.35.148':587
'91.##5.35.154':587
'91.##5.35.118':25
'91.##5.35.145':587
'91.##5.35.153':587
'91.##5.35.116':25
'91.##5.35.137':25
'91.##5.35.115':25
'91.##5.35.114':25
'91.##5.35.113':25
'91.##5.35.144':587
'91.##5.35.152':587
'91.##5.35.157':25
'91.##5.35.143':587
'91.##5.35.155':587
'87.##6.193.46':587
'91.##5.35.141':587
'91.##5.35.131':25
'91.##5.35.162':587
'91.##5.35.130':25
'91.##5.35.129':25
'91.##5.35.161':587
'91.##5.35.153':25
'91.##5.35.160':587
'91.##5.35.128':25
'91.##5.35.126':25
'91.##5.35.127':25
'91.##5.35.159':587
'91.##5.35.158':587
'91.##5.35.157':587
'91.##5.35.145':25
'91.##5.35.124':25
'91.##5.35.123':25
'91.##5.35.156':587
'91.##5.35.112':25
'91.##5.35.146':587
'91.##5.35.142':587
'91.##5.35.111':25
'91.##5.35.158':25
'91.##5.35.97':25
'91.##5.35.125':587
'91.##5.35.117':25
'91.##5.35.124':587
'91.##5.35.123':587
'91.##5.35.99':25
'91.##5.35.98':25
'91.##5.35.122':587
'91.##5.35.121':587
'91.##5.35.120':587
'91.##5.35.126':587
'91.##5.35.119':587
'91.##5.35.96':25
'91.##5.35.95':25
'91.##5.35.94':25
'91.##5.35.118':587
'91.##5.35.93':25
'91.##5.35.92':25
'91.##5.35.127':587
'91.##5.35.132':25
'91.##5.35.128':587
'91.##5.35.129':587
'91.##5.35.103':25
'91.##5.35.100':25
'91.##5.35.140':587
'91.##5.35.110':25
'91.##5.35.139':587
'91.##5.35.138':587
'91.##5.35.108':25
'91.##5.35.137':587
'91.##5.35.136':587
'91.##5.35.135':587
'91.##5.35.107':25
'91.##5.35.134':587
'91.##5.35.133':587
'91.##5.35.106':25
'91.##5.35.132':587
'91.##5.35.125':25
'91.##5.35.131':587
'91.##5.35.104':25
'91.##5.35.130':587
'91.##5.35.121':25
'91.##5.35.117':587
'91.##5.35.164':587
'91.##5.35.134':25
'91.##5.35.120':25
'91.##5.35.200':587
'91.##5.35.168':25
'91.##5.35.167':25
'91.##5.35.166':25
'91.##5.35.198':587
'91.##5.35.197':587
'91.##5.35.165':25
'91.##5.35.169':25
'91.##5.35.196':587
'91.##5.35.199':587
'91.##5.35.164':25
'91.##5.35.163':25
'91.##5.35.193':587
'91.##5.35.192':587
'91.##5.35.162':25
'91.##5.35.191':587
'91.##5.35.190':587
'91.##5.35.195':587
'91.##5.35.207':587
'91.##5.35.160':25
'91.##5.35.170':25
'91.##5.35.208':587
'91.##5.35.201':587
'91.##5.35.178':25
'91.##5.35.206':587
'91.##5.35.177':25
'91.##5.35.198':25
'91.##5.35.176':25
'91.##5.35.174':25
'91.##5.35.175':25
'91.##5.35.205':587
'91.##5.35.197':25
'91.##5.35.194':25
'91.##5.35.193':25
'91.##5.35.173':25
'91.##5.35.172':25
'91.##5.35.204':587
'91.##5.35.203':587
'91.##5.35.171':25
'91.##5.35.202':587
'91.##5.35.161':25
'91.##5.35.189':587
'91.##5.35.194':587
'91.##5.35.187':587
'91.##5.35.175':587
'91.##5.35.163':587
'91.##5.35.139':25
'91.##5.35.173':587
'91.##5.35.172':587
'91.##5.35.143':25
'91.##5.35.142':25
'91.##5.35.171':587
'91.##5.35.141':25
'91.##5.35.170':587
'91.##5.35.140':25
'91.##5.35.169':587
'91.##5.35.174':587
'91.##5.35.168':587
'91.##5.35.167':587
'91.##5.35.166':587
'91.##5.35.136':25
'91.##5.35.135':25
'91.##5.35.165':587
'91.##5.35.177':587
'91.##5.35.133':25
'91.##5.35.178':587
'91.##5.35.147':25
'91.##5.35.188':587
'91.##5.35.159':25
'91.##5.35.144':25
'91.##5.35.186':587
'91.##5.35.185':587
'91.##5.35.184':587
'91.##5.35.156':25
'91.##5.35.155':25
'91.##5.35.154':25
'91.##5.35.183':587
'91.##5.35.182':587
'91.##5.35.152':25
'91.##5.35.151':25
'91.##5.35.181':587
'91.##5.35.180':587
'91.##5.35.150':25
'91.##5.35.149':25
'91.##5.35.148':25
'91.##5.35.179':587
'91.##5.35.146':25
'91.##5.35.91':25
'87.##6.193.14':25
'87.##6.193.23':25
'87.##6.193.178':587
'87.##6.193.128':25
'87.##6.193.177':587
'87.##6.193.127':25
'87.##6.193.176':587
'87.##6.193.126':25
'87.##6.193.175':587
'87.##6.193.125':25
'87.##6.193.129':25
'87.##6.193.179':587
'87.##6.193.173':587
'87.##6.193.123':25
'87.##6.193.172':587
'87.##6.193.171':587
'87.##6.193.170':587
'87.##6.193.122':25
'87.##6.193.169':587
'87.##6.193.121':25
'87.##6.193.174':587
'87.##6.193.144':25
'87.##6.193.130':25
'87.##6.193.188':587
'87.##6.193.187':587
'87.##6.193.141':25
'87.##6.193.140':25
'87.##6.193.186':587
'87.##6.193.185':587
'87.##6.193.139':25
'87.##6.193.184':587
'87.##6.193.138':25
'87.##6.193.183':587
'87.##6.193.137':25
'87.##6.193.182':587
'87.##6.193.136':25
'87.##6.193.181':587
'87.##6.193.180':587
'87.##6.193.135':25
'87.##6.193.134':25
'87.##6.193.133':25
'87.##6.193.132':25
'87.##6.193.168':587
'87.##6.193.124':25
'87.##6.193.131':25
'87.##6.193.142':25
'87.##6.193.166':587
'87.##6.193.150':587
'87.##6.193.110':25
'87.##6.193.151':587
'87.##6.193.109':25
'87.##6.193.108':25
'87.##6.193.106':25
'87.##6.193.105':25
'87.##6.193.107':25
'87.##6.193.154':587
'87.##6.193.153':587
'87.##6.193.111':25
'87.##6.193.103':25
'87.##6.193.102':25
'87.##6.193.148':587
'87.##6.193.147':587
'87.##6.193.101':25
'87.##6.193.146':587
'87.##6.193.145':587
'87.##6.193.149':587
'87.##6.193.112':25
'87.##6.193.119':25
'87.##6.193.120':25
'87.##6.193.152':587
'87.##6.193.165':587
'87.##6.193.118':25
'87.##6.193.164':587
'87.##6.193.117':25
'87.##6.193.163':587
'87.##6.193.162':587
'87.##6.193.147':25
'87.##6.193.161':587
'87.##6.193.160':587
'87.##6.193.159':587
'87.##6.193.116':25
'87.##6.193.115':25
'87.##6.193.158':587
'87.##6.193.157':587
'87.##6.193.114':25
'87.##6.193.156':587
'87.##6.193.113':25
'87.##6.193.155':587
'87.##6.193.167':587
'87.##6.193.142':587
'87.##6.193.143':25
'87.##6.193.179':25
'87.##6.193.220':587
'87.##6.193.177':25
'87.##6.193.219':587
'87.##6.193.218':587
'87.##6.193.176':25
'87.##6.193.175':25
'87.##6.193.217':587
'87.##6.193.178':25
'87.##6.193.222':587
'87.##6.193.216':587
'87.##6.193.173':25
'87.##6.193.214':587
'87.##6.193.172':25
'87.##6.193.171':25
'87.##6.193.170':25
'87.##6.193.169':25
'87.##6.193.213':587
'87.##6.193.174':25
'87.##6.193.215':587
'87.##6.193.145':25
'87.##6.193.223':587
'87.##6.193.188':25
'87.##6.193.233':587
'87.##6.193.185':25
'87.##6.193.186':25
'87.##6.193.232':587
'87.##6.193.184':25
'87.##6.193.183':25
'87.##6.193.231':587
'87.##6.193.230':587
'87.##6.193.182':25
'87.##6.193.181':25
'87.##6.193.229':587
'87.##6.193.180':25
'87.##6.193.228':587
'87.##6.193.227':587
'87.##6.193.226':587
'87.##6.193.225':587
'87.##6.193.224':587
'87.##6.193.212':587
'87.##6.193.167':25
'87.##6.193.221':587
'87.##6.193.168':25
'87.##6.193.211':587
'87.##6.193.200':587
'87.##6.193.150':25
'87.##6.193.153':25
'87.##6.193.199':587
'87.##6.193.151':25
'87.##6.193.198':587
'87.##6.193.197':587
'87.##6.193.196':587
'87.##6.193.195':587
'87.##6.193.194':587
'87.##6.193.193':587
'87.##6.193.144':587
'87.##6.193.149':25
'87.##6.193.192':587
'87.##6.193.191':587
'87.##6.193.148':25
'87.##6.193.190':587
'87.##6.193.189':587
'87.##6.193.146':25
'87.##6.193.154':25
'87.##6.193.201':587
'87.##6.193.104':25
'87.##6.193.155':25
'87.##6.193.202':587
'87.##6.193.152':25
'87.##6.193.210':587
'87.##6.193.165':25
'87.##6.193.209':587
'87.##6.193.208':587
'87.##6.193.164':25
'87.##6.193.207':587
'87.##6.193.163':25
'87.##6.193.162':25
'87.##6.193.161':25
'87.##6.193.160':25
'87.##6.193.159':25
'87.##6.193.206':587
'87.##6.193.158':25
'87.##6.193.205':587
'87.##6.193.204':587
'87.##6.193.157':25
'87.##6.193.156':25
'87.##6.193.203':587
'87.##6.193.166':25
'87.##6.193.143':587
'87.##6.193.99':25
'24#.#6.238.236':25
'87.##6.193.86':587
'87.##6.193.84':587
'87.##6.193.42':25
'87.##6.193.83':587
'87.##6.193.82':587
'87.##6.193.40':25
'87.##6.193.39':25
'87.##6.193.81':587
'87.##6.193.15':25
'87.##6.193.85':587
'87.##6.193.79':587
'87.##6.193.78':587
'87.##6.193.77':587
'87.##6.193.76':587
'87.##6.193.75':587
'87.##6.193.37':25
'87.##6.193.36':25
'87.##6.193.74':587
'87.##6.193.38':25
'87.##6.193.87':587
'87.##6.193.94':587
'87.##6.193.73':587
'87.##6.193.55':25
'87.##6.193.93':587
'87.##6.193.54':25
'87.##6.193.53':25
'87.##6.193.52':25
'87.##6.193.51':25
'87.##6.193.50':25
'87.##6.193.49':25
'87.##6.193.48':25
'87.##6.193.92':587
'87.##6.193.47':25
'87.##6.193.91':587
'87.##6.193.90':587
'87.##6.193.46':25
'87.##6.193.89':587
'87.##6.193.45':25
'87.##6.193.88':587
'87.##6.193.44':25
'87.##6.193.35':25
'87.##6.193.80':587
'87.##6.193.43':25
'87.##6.193.72':587
'87.##6.193.34':25
'87.##6.193.60':587
'87.##6.193.17':25
'87.##6.193.22':25
'87.##6.193.20':25
'87.##6.193.21':25
'87.##6.193.19':25
'87.##6.193.57':587
'87.##6.193.56':587
'87.##6.193.18':25
'87.##6.193.55':587
'87.##6.193.54':587
'87.##6.193.95':587
'87.##6.193.53':587
'87.##6.193.52':587
'87.##6.193.51':587
'87.##6.193.50':587
'87.##6.193.49':587
'87.##6.193.48':587
'87.##6.193.16':25
'87.##6.193.61':587
'87.##6.193.41':25
'87.##6.193.71':587
'87.##6.193.63':587
'87.##6.193.59':587
'87.##6.193.58':587
'87.##6.193.33':25
'87.##6.193.70':587
'87.##6.193.69':587
'87.##6.193.32':25
'87.##6.193.68':587
'87.##6.193.31':25
'87.##6.193.30':25
'87.##6.193.28':25
'87.##6.193.67':587
'87.##6.193.29':25
'87.##6.193.27':25
'87.##6.193.26':25
'87.##6.193.66':587
'87.##6.193.25':25
'87.##6.193.65':587
'87.##6.193.24':25
'87.##6.193.64':587
'87.##6.193.62':587
'87.##6.193.47':587
'87.##6.193.56':25
'87.##6.193.107':587
'87.##6.193.92':25
'87.##6.193.127':587
'87.##6.193.89':25
'87.##6.193.126':587
'87.##6.193.125':587
'87.##6.193.88':25
'87.##6.193.124':587
'87.##6.193.87':25
'87.##6.193.57':25
'87.##6.193.91':25
'87.##6.193.85':25
'87.##6.193.122':587
'87.##6.193.84':25
'87.##6.193.121':587
'87.##6.193.82':25
'87.##6.193.83':25
'87.##6.193.120':587
'87.##6.193.81':25
'87.##6.193.86':25
'87.##6.193.129':587
'87.##6.193.141':587
'87.##6.193.118':587
'87.##6.193.100':25
'87.##6.193.140':587
'87.##6.193.97':25
'87.##6.193.98':25
'87.##6.193.96':25
'87.##6.193.139':587
'87.##6.193.138':587
'87.##6.193.95':25
'87.##6.193.94':25
'87.##6.193.137':587
'87.##6.193.93':25
'87.##6.193.136':587
'87.##6.193.135':587
'87.##6.193.134':587
'87.##6.193.133':587
'87.##6.193.132':587
'87.##6.193.131':587
'87.##6.193.130':587
'87.##6.193.119':587
'87.##6.193.123':587
'87.##6.193.128':587
'87.##6.193.80':25
'87.##6.193.117':587
'87.##6.193.106':587
'87.##6.193.61':25
'87.##6.193.104':587
'87.##6.193.66':25
'87.##6.193.103':587
'87.##6.193.102':587
'87.##6.193.65':25
'87.##6.193.101':587
'87.##6.193.64':25
'87.##6.193.63':25
'87.##6.193.62':25
'87.##6.193.96':587
'87.##6.193.60':25
'87.##6.193.59':25
'87.##6.193.100':587
'87.##6.193.58':25
'87.##6.193.99':587
'87.##6.193.97':587
'87.##6.193.98':587
'87.##6.193.109':587
'87.##6.193.90':25
'87.##6.193.79':25
'87.##6.193.68':25
'87.##6.193.105':587
'87.##6.193.67':25
'87.##6.193.78':25
'87.##6.193.77':25
'87.##6.193.76':25
'87.##6.193.75':25
'87.##6.193.116':587
'87.##6.193.115':587
'87.##6.193.74':25
'87.##6.193.73':25
'87.##6.193.114':587
'87.##6.193.72':25
'87.##6.193.113':587
'87.##6.193.112':587
'87.##6.193.71':25
'87.##6.193.111':587
'87.##6.193.70':25
'87.##6.193.69':25
'87.##6.193.110':587
'87.##6.193.108':587
'91.##5.35.116':587
'91.##5.35.109':25
'91.##5.35.115':587
'24#.#6.238.121':587
'24#.#6.238.119':25
'24#.#6.238.120':587
'24#.#6.238.119':587
'24#.#6.238.118':25
'24#.#6.238.118':587
'24#.#6.238.117':25
'24#.#6.238.121':25
'24#.#6.238.123':587
'24#.#6.238.117':587
'24#.#6.238.115':25
'24#.#6.238.115':587
'24#.#6.238.114':25
'24#.#6.238.114':587
'24#.#6.238.113':25
'24#.#6.238.113':587
'24#.#6.238.112':25
'24#.#6.238.116':25
'24#.#6.238.116':587
'24#.#6.238.134':25
'24#.#6.238.122':25
'24#.#6.238.133':587
'24#.#6.238.131':25
'24#.#6.238.130':25
'24#.#6.238.131':587
'24#.#6.238.130':587
'24#.#6.238.129':25
'24#.#6.238.129':587
'24#.#6.238.128':25
'24#.#6.238.127':25
'24#.#6.238.128':587
'24#.#6.238.127':587
'24#.#6.238.125':25
'24#.#6.238.126':25
'24#.#6.238.126':587
'24#.#6.238.125':587
'24#.#6.238.124':25
'24#.#6.238.123':25
'24#.#6.238.124':587
'24#.#6.238.112':587
'24#.#6.238.133':25
'24#.#6.238.122':587
'24#.#6.238.132':587
'24#.#6.238.111':25
'24#.#6.238.99':587
'24#.#6.238.94':587
'24#.#6.238.98':587
'24#.#6.238.97':587
'24#.#6.238.95':25
'24#.#6.238.96':25
'24#.#6.238.95':587
'24#.#6.238.96':587
'24#.#6.238.97':25
'24#.#6.238.101':587
'24#.#6.238.94':25
'24#.#6.238.99':25
'24#.#6.238.93':587
'24#.#6.238.92':587
'24#.#6.238.91':25
'24#.#6.238.90':25
'24#.#6.238.91':587
'24#.#6.238.90':587
'24#.#6.238.93':25
'24#.#6.238.92':25
'24#.#6.238.110':587
'24#.#6.238.109':25
'24#.#6.238.134':587
'24#.#6.238.98':25
'24#.#6.238.109':587
'24#.#6.238.108':25
'24#.#6.238.108':587
'24#.#6.238.107':25
'24#.#6.238.107':587
'24#.#6.238.106':25
'24#.#6.238.106':587
'24#.#6.238.105':25
'24#.#6.238.105':587
'24#.#6.238.104':25
'24#.#6.238.104':587
'24#.#6.238.103':25
'24#.#6.238.103':587
'24#.#6.238.102':25
'24#.#6.238.101':25
'24#.#6.238.102':587
'24#.#6.238.100':25
'24#.#6.238.111':587
'24#.#6.238.110':25
'24#.#6.238.179':587
'24#.#6.238.135':587
'24#.#6.238.166':25
'24#.#6.238.166':587
'24#.#6.238.165':25
'24#.#6.238.165':587
'24#.#6.238.164':25
'24#.#6.238.164':587
'24#.#6.238.163':25
'24#.#6.238.167':25
'24#.#6.238.163':587
'24#.#6.238.169':587
'24#.#6.238.162':587
'24#.#6.238.161':587
'24#.#6.238.160':25
'24#.#6.238.159':587
'24#.#6.238.160':587
'24#.#6.238.158':25
'24#.#6.238.157':25
'24#.#6.238.162':25
'24#.#6.238.168':587
'24#.#6.238.161':25
'24#.#6.238.167':587
'24#.#6.238.178':587
'24#.#6.238.176':25
'24#.#6.238.177':587
'24#.#6.238.175':25
'24#.#6.238.176':587
'24#.#6.238.174':25
'24#.#6.238.175':587
'24#.#6.238.174':587
'24#.#6.238.173':25
'24#.#6.238.173':587
'24#.#6.238.172':25
'24#.#6.238.159':25
'24#.#6.238.172':587
'24#.#6.238.171':25
'24#.#6.238.171':587
'24#.#6.238.170':25
'24#.#6.238.170':587
'24#.#6.238.169':25
'24#.#6.238.157':587
'24#.#6.238.158':587
'24#.#6.238.156':25
'24#.#6.238.168':25
'24#.#6.238.152':25
'24#.#6.238.144':25
'24#.#6.238.143':587
'24#.#6.238.138':25
'24#.#6.238.142':25
'24#.#6.238.141':25
'24#.#6.238.141':587
'24#.#6.238.142':587
'24#.#6.238.139':25
'24#.#6.238.140':25
'24#.#6.238.140':587
'24#.#6.238.139':587
'24#.#6.238.138':587
'24#.#6.238.145':587
'24#.#6.238.137':25
'24#.#6.238.137':587
'24#.#6.238.136':25
'24#.#6.238.136':587
'24#.#6.238.135':25
'24#.#6.238.132':25
'24#.#6.238.143':25
'24#.#6.238.89':25
'24#.#6.238.145':25
'24#.#6.238.100':587
'24#.#6.238.156':587
'24#.#6.238.89':587
'24#.#6.238.144':587
'24#.#6.238.155':587
'24#.#6.238.154':25
'24#.#6.238.154':587
'24#.#6.238.153':25
'24#.#6.238.153':587
'24#.#6.238.151':25
'24#.#6.238.152':587
'24#.#6.238.151':587
'24#.#6.238.150':25
'24#.#6.238.150':587
'24#.#6.238.149':25
'24#.#6.238.149':587
'24#.#6.238.148':25
'24#.#6.238.148':587
'24#.#6.238.147':25
'24#.#6.238.146':25
'24#.#6.238.147':587
'24#.#6.238.146':587
'24#.#6.238.155':25
'24#.#6.238.88':25
'24#.#6.238.88':587
'24#.#6.238.26':25
'24#.#6.238.25':25
'24#.#6.238.26':587
'24#.#6.238.30':587
'24#.#6.238.29':25
'24#.#6.238.29':587
'24#.#6.238.28':25
'24#.#6.238.28':587
'24#.#6.238.31':587
'24#.#6.238.32':25
'24#.#6.238.27':25
'24#.#6.238.32':587
'24#.#6.238.25':587
'24#.#6.238.24':587
'24#.#6.238.22':25
'24#.#6.238.23':25
'24#.#6.238.23':587
'24#.#6.238.21':25
'24#.#6.238.27':587
'24#.#6.238.24':25
'24#.#6.238.43':587
'24#.#6.238.42':25
'24#.#6.238.20':25
'24#.#6.238.20':587
'24#.#6.238.42':587
'24#.#6.238.41':25
'24#.#6.238.41':587
'24#.#6.238.40':25
'24#.#6.238.40':587
'24#.#6.238.39':25
'24#.#6.238.39':587
'24#.#6.238.38':25
'24#.#6.238.38':587
'24#.#6.238.33':25
'24#.#6.238.33':587
'24#.#6.238.36':25
'24#.#6.238.36':587
'24#.#6.238.35':25
'24#.#6.238.35':587
'24#.#6.238.34':25
'24#.#6.238.34':587
'24#.#6.238.22':587
'24#.#6.238.31':25
'24#.#6.238.21':587
'24#.#6.238.8':25
'24#.#6.238.178':25
'24#.#6.238.3':25
'24#.#6.238.7':587
'24#.#6.238.6':25
'24#.#6.238.6':587
'24#.#6.238.4':25
'24#.#6.238.4':587
'24#.#6.238.5':25
'24#.#6.238.5':587
'24#.#6.238.0':25
'24#.#6.238.3':587
'24#.#6.238.43':25
'24#.#6.238.2':25
'24#.#6.238.2':587
'24#.#6.238.1':25
'24#.#6.238.0':587
'24#.#6.238.1':587
'mo##ow13.at':80
'smtp.yandex.ru':25
'24#.#6.238.9':587
'24#.#6.238.7':25
'24#.#6.238.44':587
'24#.#6.238.10':587
'24#.#6.238.9':25
'24#.#6.238.8':587
'24#.#6.238.19':587
'24#.#6.238.18':25
'24#.#6.238.18':587
'24#.#6.238.17':25
'24#.#6.238.17':587
'24#.#6.238.16':25
'24#.#6.238.15':25
'24#.#6.238.16':587
'24#.#6.238.15':587
'24#.#6.238.14':25
'24#.#6.238.14':587
'24#.#6.238.13':25
'24#.#6.238.12':25
'24#.#6.238.12':587
'24#.#6.238.13':587
'24#.#6.238.11':25
'24#.#6.238.10':25
'24#.#6.238.11':587
'24#.#6.238.19':25
'24#.#6.238.177':25
'24#.#6.238.37':587
'24#.#6.238.53':25
'24#.#6.238.78':587
'24#.#6.238.76':587
'24#.#6.238.74':25
'24#.#6.238.75':587
'24#.#6.238.73':25
'24#.#6.238.74':587
'24#.#6.238.70':25
'24#.#6.238.73':587
'24#.#6.238.30':25
'24#.#6.238.77':587
'24#.#6.238.71':25
'24#.#6.238.71':587
'24#.#6.238.69':25
'24#.#6.238.70':587
'24#.#6.238.69':587
'24#.#6.238.68':25
'24#.#6.238.68':587
'24#.#6.238.67':25
'24#.#6.238.72':25
'24#.#6.238.78':25
'24#.#6.238.87':587
'24#.#6.238.67':587
'24#.#6.238.87':25
'24#.#6.238.86':25
'24#.#6.238.86':587
'24#.#6.238.85':25
'24#.#6.238.85':587
'24#.#6.238.83':25
'24#.#6.238.84':25
'24#.#6.238.84':587
'24#.#6.238.83':587
'24#.#6.238.82':25
'24#.#6.238.81':25
'24#.#6.238.82':587
'24#.#6.238.80':25
'24#.#6.238.80':587
'24#.#6.238.81':587
'24#.#6.238.79':25
'24#.#6.238.75':25
'24#.#6.238.79':587
'24#.#6.238.66':25
'24#.#6.238.72':587
'24#.#6.238.77':25
'24#.#6.238.65':25
'24#.#6.238.66':587
'24#.#6.238.54':25
'24#.#6.238.48':25
'24#.#6.238.52':25
'24#.#6.238.51':25
'24#.#6.238.52':587
'24#.#6.238.51':587
'24#.#6.238.50':25
'24#.#6.238.49':25
'24#.#6.238.50':587
'24#.#6.238.49':587
'24#.#6.238.47':25
'24#.#6.238.44':25
'24#.#6.238.48':587
'24#.#6.238.47':587
'24#.#6.238.46':25
'24#.#6.238.37':25
'24#.#6.238.46':587
'24#.#6.238.45':25
'24#.#6.238.45':587
'24#.#6.238.56':25
'24#.#6.238.76':25
'24#.#6.238.65':587
'24#.#6.238.57':587
'24#.#6.238.54':587
'24#.#6.238.53':587
'24#.#6.238.64':25
'24#.#6.238.64':587
'24#.#6.238.63':25
'24#.#6.238.63':587
'24#.#6.238.62':25
'24#.#6.238.61':25
'24#.#6.238.62':587
'24#.#6.238.60':25
'24#.#6.238.61':587
'24#.#6.238.60':587
'24#.#6.238.55':25
'24#.#6.238.59':25
'24#.#6.238.55':587
'24#.#6.238.59':587
'24#.#6.238.58':25
'24#.#6.238.58':587
'24#.#6.238.57':25
'24#.#6.238.56':587
'24#.#6.238.120':25
'24#.#6.238.180':587
'91.##5.35.49':25
'91.##5.35.36':25
'91.##5.35.55':587
'91.##5.35.35':25
'91.##5.35.54':587
'91.##5.35.34':25
'91.##5.35.53':587
'91.##5.35.51':587
'91.##5.35.52':587
'91.##5.35.19':587
'91.##5.35.56':587
'91.##5.35.49':587
'91.##5.35.32':25
'91.##5.35.48':587
'91.##5.35.47':587
'91.##5.35.46':587
'91.##5.35.41':25
'91.##5.35.45':587
'91.##5.35.31':25
'91.##5.35.50':587
'91.##5.35.37':25
'91.##5.35.67':587
'91.##5.35.44':587
'91.##5.35.46':25
'91.##5.35.66':587
'91.##5.35.65':587
'91.##5.35.44':25
'91.##5.35.61':25
'91.##5.35.43':25
'91.##5.35.64':587
'91.##5.35.42':25
'91.##5.35.40':25
'91.##5.35.63':587
'91.##5.35.62':587
'91.##5.35.39':25
'91.##5.35.57':25
'91.##5.35.61':587
'91.##5.35.60':587
'91.##5.35.38':25
'91.##5.35.59':587
'91.##5.35.58':587
'91.##5.35.30':25
'91.##5.35.45':25
'91.##5.35.57':587
'91.##5.35.43':587
'91.##5.35.42':587
'91.##5.35.19':25
'91.##5.35.12':25
'91.##5.35.17':25
'91.##5.35.16':25
'91.##5.35.15':25
'91.##5.35.14':25
'91.##5.35.29':587
'91.##5.35.28':587
'91.##5.35.27':587
'91.##5.35.26':587
'91.##5.35.25':587
'91.##5.35.68':587
'91.##5.35.24':587
'91.##5.35.11':25
'91.##5.35.23':587
'91.##5.35.22':587
'91.##5.35.21':587
'91.##5.35.10':25
'91.##5.35.20':587
'91.##5.35.32':587
'24#.#6.238.179':25
'91.##5.35.41':587
'91.##5.35.33':587
'91.##5.35.31':587
'91.##5.35.30':587
'91.##5.35.40':587
'91.##5.35.29':25
'91.##5.35.28':25
'91.##5.35.39':587
'91.##5.35.38':587
'91.##5.35.27':25
'91.##5.35.26':25
'91.##5.35.37':587
'91.##5.35.36':587
'91.##5.35.33':25
'91.##5.35.25':25
'91.##5.35.35':587
'91.##5.35.24':25
'91.##5.35.34':587
'91.##5.35.23':25
'91.##5.35.22':25
'91.##5.35.21':25
'91.##5.35.20':25
'91.##5.35.18':25
'91.##5.35.47':25
'91.##5.35.60':25
'91.##5.35.101':25
'91.##5.35.80':25
'91.##5.35.79':25
'91.##5.35.103':587
'91.##5.35.102':587
'91.##5.35.78':25
'91.##5.35.101':587
'91.##5.35.100':587
'91.##5.35.69':587
'91.##5.35.105':587
'91.##5.35.99':587
'91.##5.35.98':587
'91.##5.35.74':25
'91.##5.35.97':587
'91.##5.35.72':25
'91.##5.35.73':25
'91.##5.35.96':587
'91.##5.35.95':587
'91.##5.35.76':25
'91.##5.35.82':25
'91.##5.35.113':587
'91.##5.35.93':587
'91.##5.35.114':587
'91.##5.35.90':25
'91.##5.35.112':587
'91.##5.35.88':25
'91.##5.35.89':25
'91.##5.35.111':587
'91.##5.35.87':25
'91.##5.35.110':587
'91.##5.35.86':25
'91.##5.35.105':25
'91.##5.35.109':587
'91.##5.35.108':587
'91.##5.35.85':25
'91.##5.35.102':25
'91.##5.35.84':25
'91.##5.35.83':25
'91.##5.35.107':587
'91.##5.35.106':587
'91.##5.35.94':587
'91.##5.35.75':25
'91.##5.35.81':25
'91.##5.35.92':587
'91.##5.35.91':587
'91.##5.35.79':587
'91.##5.35.73':587
'91.##5.35.58':25
'91.##5.35.77':587
'91.##5.35.76':587
'91.##5.35.75':587
'91.##5.35.56':25
'91.##5.35.74':587
'91.##5.35.55':25
'91.##5.35.72':587
'91.##5.35.54':25
'91.##5.35.48':25
'91.##5.35.53':25
'91.##5.35.52':25
'91.##5.35.51':25
'91.##5.35.50':25
'91.##5.35.71':587
'91.##5.35.65':25
'91.##5.35.70':587
'91.##5.35.62':25
'91.##5.35.104':587
'91.##5.35.71':25
'91.##5.35.63':25
'91.##5.35.78':587
'91.##5.35.59':25
'91.##5.35.70':25
'91.##5.35.69':25
'91.##5.35.90':587
'91.##5.35.89':587
'91.##5.35.88':587
'91.##5.35.87':587
'91.##5.35.68':25
'91.##5.35.86':587
'91.##5.35.67':25
'91.##5.35.66':25
'91.##5.35.85':587
'91.##5.35.84':587
'91.##5.35.83':587
'91.##5.35.64':25
'91.##5.35.82':587
'91.##5.35.77':25
'91.##5.35.81':587
'91.##5.35.80':587
'87.##6.193.234':587
'87.##6.193.187':25
'91.#85.35.9':25
'24#.#6.238.209':587
'24#.#6.238.212':587
'24#.#6.238.211':587
'24#.#6.238.209':25
'24#.#6.238.210':25
'24#.#6.238.210':587
'24#.#6.238.208':25
'24#.#6.238.208':587
'24#.#6.238.213':25
'24#.#6.238.212':25
'24#.#6.238.213':587
'24#.#6.238.207':587
'24#.#6.238.206':587
'24#.#6.238.205':25
'24#.#6.238.204':25
'24#.#6.238.205':587
'24#.#6.238.204':587
'24#.#6.238.203':25
'24#.#6.238.207':25
'24#.#6.238.214':587
'24#.#6.238.224':587
'24#.#6.238.202':25
'24#.#6.238.202':587
'24#.#6.238.223':25
'24#.#6.238.223':587
'24#.#6.238.222':587
'24#.#6.238.221':25
'24#.#6.238.219':25
'24#.#6.238.221':587
'24#.#6.238.220':25
'24#.#6.238.220':587
'24#.#6.238.219':587
'24#.#6.238.217':25
'24#.#6.238.218':25
'24#.#6.238.218':587
'24#.#6.238.217':587
'24#.#6.238.216':25
'24#.#6.238.215':25
'24#.#6.238.216':587
'24#.#6.238.215':587
'24#.#6.238.214':25
'24#.#6.238.206':25
'24#.#6.238.203':587
'24#.#6.238.201':25
'24#.#6.238.190':25
'24#.#6.238.185':25
'24#.#6.238.189':587
'24#.#6.238.188':25
'24#.#6.238.188':587
'24#.#6.238.187':25
'24#.#6.238.186':25
'24#.#6.238.187':587
'24#.#6.238.186':587
'24#.#6.238.184':25
'24#.#6.238.185':587
'24#.#6.238.190':587
'24#.#6.238.183':25
'24#.#6.238.184':587
'24#.#6.238.183':587
'24#.#6.238.182':25
'24#.#6.238.181':25
'24#.#6.238.181':587
'24#.#6.238.182':587
'24#.#6.238.180':25
'24#.#6.238.224':25
'91.##5.35.18':587
'24#.#6.238.191':587
'24#.#6.238.193':587
'24#.#6.238.189':25
'24#.#6.238.199':25
'24#.#6.238.201':587
'24#.#6.238.200':25
'24#.#6.238.200':587
'24#.#6.238.199':587
'24#.#6.238.198':25
'24#.#6.238.198':587
'24#.#6.238.196':25
'24#.#6.238.197':25
'24#.#6.238.197':587
'24#.#6.238.196':587
'24#.#6.238.194':25
'24#.#6.238.195':25
'24#.#6.238.195':587
'24#.#6.238.194':587
'24#.#6.238.192':25
'24#.#6.238.193':25
'24#.#6.238.192':587
'24#.#6.238.191':25
'91.##5.35.13':25
'24#.#6.238.222':25
'24#.#6.238.226':25
'91.#85.35.5':587
'91.#85.35.3':587
'91.#85.35.2':587
'91.#85.35.1':587
'91.#85.35.0':587
'24#.#6.238.254':25
'24#.#6.238.255':25
'24#.#6.238.255':587
'24#.#6.238.211':25
'24#.#6.238.254':587
'24#.#6.238.252':25
'24#.#6.238.253':587
'24#.#6.238.252':587
'24#.#6.238.251':25
'24#.#6.238.251':587
'24#.#6.238.249':25
'24#.#6.238.250':25
'24#.#6.238.250':587
'91.#85.35.4':587
'91.#85.35.6':587
'91.##5.35.17':587
'24#.#6.238.249':587
'91.#85.35.7':587
'91.##5.35.16':587
'91.##5.35.15':587
'91.##5.35.14':587
'91.#85.35.8':25
'91.##5.35.13':587
'91.#85.35.7':25
'91.##5.35.12':587
'91.#85.35.6':25
'91.##5.35.11':587
'91.#85.35.5':25
'91.##5.35.10':587
'91.#85.35.4':25
'91.#85.35.3':25
'91.#85.35.9':587
'91.#85.35.2':25
'91.#85.35.1':25
'91.#85.35.0':25
'91.#85.35.8':587
'24#.#6.238.248':25
'24#.#6.238.253':25
'24#.#6.238.245':25
'24#.#6.238.248':587
'24#.#6.238.226':587
'24#.#6.238.231':587
'24#.#6.238.234':25
'24#.#6.238.233':25
'24#.#6.238.234':587
'24#.#6.238.233':587
'24#.#6.238.232':25
'24#.#6.238.232':587
'24#.#6.238.231':25
'24#.#6.238.230':25
'24#.#6.238.229':25
'24#.#6.238.236':587
'24#.#6.238.230':587
'24#.#6.238.229':587
'24#.#6.238.227':25
'24#.#6.238.228':25
'24#.#6.238.228':587
'24#.#6.238.227':587
'24#.#6.238.225':25
'24#.#6.238.235':25
'24#.#6.238.225':587
'24#.#6.238.237':587
'24#.#6.238.237':25
'24#.#6.238.245':587
'24#.#6.238.235':587
'24#.#6.238.247':25
'24#.#6.238.247':587
'24#.#6.238.246':25
'24#.#6.238.246':587
'24#.#6.238.242':25
'24#.#6.238.244':25
'24#.#6.238.244':587
'24#.#6.238.243':25
'24#.#6.238.243':587
'24#.#6.238.242':587
'24#.#6.238.241':25
'24#.#6.238.240':25
'24#.#6.238.241':587
'24#.#6.238.240':587
'24#.#6.238.239':25
'24#.#6.238.238':25
'24#.#6.238.239':587
'24#.#6.238.238':587
'87.##6.193.235':587

TCP

HTTP GET requests

http://mo##ow13.at/ssa/scan.php

Other

'smtp.yandex.ru':587
'smtp.yandex.ru':25

UDP

DNS ASK smtp.yandex.ru
DNS ASK mo##ow13.at

Miscellaneous

Creates and executes the following

'%APPDATA%\microsoft\windows\start menu\programs\startup\asupen.exe'
'<SYSTEM32>\cmd.exe' /C choice /C Y /N /D Y /T 3 & Del "<Full path to file>" && /C choice /C Y /N /D Y /T 3 & Del "shfolder.dll" && Del LAG1 && Del LAG2' (with hidden window)

Executes the following

'<SYSTEM32>\cmd.exe' /C choice /C Y /N /D Y /T 3 & Del "<Full path to file>" && /C choice /C Y /N /D Y /T 3 & Del "shfolder.dll" && Del LAG1 && Del LAG2
'<SYSTEM32>\choice.exe' /C Y /N /D Y /T 3

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней