Submission Summary:

• Submission details:
• Submission received: 17 September 2012, 08:50:20
• Processing time: 8 min 7 sec
• Submitted sample:
• File MD5: 0xBE4AB06D1AA025782D7903366593521B
• File SHA-1: 0x64733CDD102D29411B4C2AEEE196A9DF30CE53E5
• Filesize: 770,573 bytes
• Alias: Virus.Win32.DelfInject [Ikarus]

• Summary of the findings:

What's been found	Severity Level
Downloads/requests other files from Internet.

Technical Details:

File System Modifications

• The following file was created in the system:

#	Filename(s)	File Size	File Hash	Alias
1	%Temp%\2.tmp	770,573 bytes	MD5: 0xBE4AB06D1AA025782D7903366593521B SHA-1: 0x64733CDD102D29411B4C2AEEE196A9DF30CE53E5	Virus.Win32.DelfInject [Ikarus]

• Note:
• %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).

Memory Modifications

• There was a new process created in the system:

Other details

• The following Host Name was requested from a host database:
• 46.105.131.121

• The following HTTP URL was started reading:
• http://report.1my3ce93k7y3c7s3.com/?AAA920 =%96%96%A7%A6%A6%A8df%A6%DA%97%C9%C7%9Fi%CD%9A%DCi %94k%A3%98e%C8%9F%A0%A4stm%95g%98%DC%E6%AC%E9%EA%8 6%81%93%EE%9C%C7%A2nk%A3m%9F%9F%D1%9E%B0%98%9C%90% C4%C0g%AE%AA%9Doe%A4%96%A4%A5%A8%B8pr%B2%AEx%A4%95..