Win32/TrojanDownloader.Inexsmar [Threat Name] go to Threat

Win32/TrojanDownloader.Inexsmar.A [Threat Variant Name]

Category trojan
Size 15360 B
Aliases TrojanDownloader:Win32/Inexsmar.A (Microsoft)
  Trojan.DownLoader15.10797 (Dr.Web)
Short description

Win32/TrojanDownloader.Inexsmar.A is a trojan which tries to download other malware from the Internet.

Installation

The trojan does not create any copies of itself.

Other information

The trojan contains a URL address.


It tries to download a file from the address. The HTTP protocol is used.


The downloaded files contain encrypted executables.


The trojan may create the following files:

  • %temp%\­log%number%.tmp.bat
  • %temp%\­log%number%.tmp
  • %temp%\­explorers

After decryption, the trojan runs these files.


The %number% represents a random number.


The trojan attempts to delete the following file:

  • %temp%\­Internet Explorer Service Pack.hta

Please enable Javascript to ensure correct displaying of this content and refresh this page.