• Home
• Threat Encyclopaedia
• Glossary
• Statistics
• Update Info
• Tools
• Reports
• Threat Radar Report, February 2014

Short description

Win32/Amitis.143.B serves as a backdoor. It can be controlled remotely. The file is run-time compressed using UPX .

Installation

The trojan may create copies of itself using the following filenames:

The file name may vary depending on the current settings stored in the malware executable.

The trojan can modify the following files:

The trojan may set the following Registry entries:

This causes the trojan to be executed on every system start.

The trojan may set the following Registry entries:

A string with variable content is used instead of %variable% .

Information stealing

The following information is collected:

The trojan attempts to send gathered information to a remote machine.

Other information

The trojan acquires data and commands from a remote computer or the Internet.

The malware configuration is passed as command line parameters or read from the file when the malware executable is launched.

The TCP, FTP, HTTP, SMTP protocol is used in the communication.

It may perform the following actions:

The trojan affects the behavior of the following applications:

1992 - 2023 ESET, spol. s r.o. - All rights reserved. Trademarks used therein are trademarks or registered trademarks of ESET, spol. s r.o. or ESET North America. All other names and brands are registered trademarks of their respective companies.