ThreatExpert Report: PortScan-OpenPorts, Generic HTool.b

Technical Details:

File System Modifications

The following files were created in the system:

Filename(s)

File Size

File Hash

Alias

%Temp%\A0083439.bat

84 bytes

MD5: 0x7F2E02FF60B691CB31C8BE3B13F6FEDC
SHA-1: 0x2EDB76946A4B350F121CD3DBE616EBBDCCDDD911

(not available)

%Temp%\A0083440.ini

13,217 bytes

MD5: 0x00D0C02FFF29FA7B903EEE479028F40C
SHA-1: 0x436933D380AD233A2EF45E41F0443BFA8D749942

(not available)

%Temp%\A0083441.exe

32,768 bytes

MD5: 0xE8954BF3D3419C3D4C0BC3215A5AAEA1
SHA-1: 0xF598D34766F3E5C96D4F44F72EA11FA9088DF631

PortScan-OpenPorts [McAfee]

%Temp%\A0083442.exe

3,584 bytes

MD5: 0xE5F2E4AD06DD46994939C9807BA9E85C
SHA-1: 0x12503C87316435B6C602CCFEF83589CFE12E5E42

Generic HTool.b

[McAfee]

[file and pathname of the sample #1]

17,900 bytes

MD5: 0x2E9AB62387C9CAA27280F5ECE4328EDB
SHA-1: 0x53D895C3B1830F69076D4E834C8A509D217FD8B6

(not available)

Note:

%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).

Memory Modifications

There were new processes created in the system:

Process Name

Process Filename

Main Module Size

A0083441.exe

%Temp%\A0083441.exe

36,864 bytes

A0083442.exe

%Temp%\A0083442.exe

16,384 bytes

Other details

The following Host Name was requested from a host database:

192.5.5.241

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.

Submission Summary:

Technical Details: