BKDR64_WINNTI.NT
June 02, 2017
PLATFORM:
Windows
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:
Threat Type: Backdoor
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
It requires its main component to successfully perform its intended routine.
TECHNICAL DETAILS
File Size: 70,656 bytes
File Type: DLL
Initial Samples Received Date: 19 Aug 2016
Arrival Details
This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Installation
This Backdoor adds the following processes:
- rundll32.exe regfcfg.dll,CreateWork
Other Details
This Backdoor requires its main component to successfully perform its intended routine.