BKDR64_ZXSHELL.WNV
ALIASES:
Backdoor:Win64/Zxshell.A!dha (Microsoft)
PLATFORM:
Windows
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:
Threat Type: Backdoor
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This backdoor may arrive bundled with malware packages as a malware component. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
TECHNICAL DETAILS
File Size:
1,294,840 bytes
File Type:
DLL
Initial Samples Received Date:
05 Nov 2015
Arrival Details
This backdoor may arrive bundled with malware packages as a malware component.
It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Installation
This backdoor drops the following file(s)/component(s):
- %Windows%\Tasks\SCHEDLGU.TXT
- %Windows%\setupact.log
(Note: %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.)