KomarMiner, a cryptomining Trojan disguising as cracking software [360totalsecurity]

09 Sep 2018

No Comments

1735

Recently, 360 Security Center monitored a kind of malicious mining Trojans disguising as all kinds of commonly used cracking software for big spread. At present, it has already supported defense against killing and killing. It is recommended that users do not download various software with unknown origins. Download the software as far as possible to the official website.

Analysis
KomarMiner Trojan disguises as a variety of cracker downloaders, here are the common file names:

kirrak+party+(2018)+telugu+full+movie+watch+online.exe

SOLIDWORKS 2017 PRO CRACK FREE DOWNLOAD.EXE

TCS GSM Drivers Pack Solution 2018 Free Download.exe

9NLHMRZOMS.EXE

PAYSAFECARD+CODES+GENERATOR+2018+8211+UNLIMITED+CODE+LIST.EXE

After running the cracker, the Trojan will be downloaded to %UserProfile%\appdata\local\temp\27777.exe, and the main role of 27777.exe is to download Trojan files online.

The download address is:
http://letmecheckyou.be/build.exe

For more, click here.