Agent.DF_9 is a Worm. Worms are reproducing malicious programs that run independently and travel across network connections without human action. They could spread over email, IM, peer-to-peer networks, or directly over the wire by leveraging vulnerabilities. The threat that a worm poses is its capability to replicate itself on the system so the computer can send out hundreds or thousands of copies of itself.
Mutexes created
Directory level activity
File level activity
Registry level activity
Library level activity
Process API calls used
Registry API calls used
System API calls used
Filesystem API calls used
Network
UDP source >> destination
- 192.168.30.254 >> 192.168.30.3
- 192.168.30.3 >> 192.168.30.255
TCP source >> destination
- 192.168.30.3 >> 192.168.30.254
Domains:
DNS Request:
HTTP Request:
DLL related data
Number of DLL's imported = 1
|
