Trojan.Win32.Sramler.A
| TSL ID | FSC20100204-05 |
| Severity | Moderate |
| Description | Trojan.Win32.Sramler.A, also identified as Trojan-Downloader.Win32.Mazahaka.a, is a Trojan with multiple functions. This Trojan is typically distributed via malicious Web pages and it resembles an installer of Qvod player. Once installed, this Trojan drops a few files on the host and communicates with a remote server to receive further download instructions. The malware communicates both over HTTP and over a custom protocol on TCP. In addition, the malware opens multiple UDP ports on the system and receives data from multiple remote servers on these ports. Finally, after running for less than a minute the malware shuts down the victim's system. |
| Affected Products |
|
| File Hashes |
MD5:
|