Win32/Leouncia [Threat Name] go to Threat

Win32/Leouncia.A [Threat Variant Name]

Category trojan
Size 45056 B
Aliases BackDoor.RemoteShell.75 (Dr.Web)
  TROJ_LAMEWAR.VTG (TrendMicro)
Short description

The trojan serves as a backdoor. It can be controlled remotely.

Installation

The trojan does not create any copies of itself.

Other information

The trojan acquires data and commands from a remote computer or the Internet.


The trojan contains an URL address. The HTTP protocol is used.


It can execute the following operations:

  • download files from a remote computer and/or the Internet
  • run executable files
  • terminate running processes
  • send files to a remote computer
  • send the list of disk devices and their type to a remote computer
  • send the list of running processes to a remote computer

The trojan may create the following files:

  • readx

Please enable Javascript to ensure correct displaying of this content and refresh this page.