Sazoora.B

By GoldSparrow in Trojans

Threat Scorecard

Ranking: 7,283
Threat Level: 90 % (High)
Infected Computers: 3,254
First Seen: October 24, 2013
Last Seen: September 19, 2023
OS(es) Affected: Windows

Sazoora.B is a new variation of an infostealer Trojan that steals information from a targeted computer system. Once run, Sazoora.B may create a copy of itself as the malevolent file. Sazoora.B may create the registry entry so that it can be launched automatically whenever a computer user boots up Windows. Sazoora.B may then create more registry entries. Sazoora.B may steal information by controlling the particular online banking websites. Sazoora.B may also control the web browsers Mozilla Firefox, Google Chrome and Internet Explorer in an attempt to steal more information. Sazoora.B may create the log file used to store the stolen information. Sazoora.B may then transfer the grabbed data to the particular locations. Sazoora.B is generated to more effectively bypass security programs. Sazoora.B bypasses sandboxes by staying dormant for fifteen minutes after it corrupts a device. When Sazoora.B is launched, it starts communicating with its command and control (C&C) server. Firstly, Sazoora.B assures the C&C is owned by the cybercriminals by asking the server for its authentication itself. This blocks others from hacking the botnet.

SpyHunter Detects & Remove Sazoora.B

File System Details

Sazoora.B may create the following file(s):
# File Name MD5 Detections
1. e40fd42eec5cfd6264fc4f82721c0421cd0ba423aab2fa5358c22c72af26bad9 8aa46d29290d6fafad0a8cea0dc03cfc 12

Trending

Most Viewed

Loading...