Threat Database Trojans TrojanDownloader: MSIL/Trurard.A

TrojanDownloader: MSIL/Trurard.A

By GoldSparrow in Trojans

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 2
First Seen: April 20, 2016
Last Seen: July 23, 2019
OS(es) Affected: Windows

The TrojanDownloader: MSIL/Trurard.A is associated with another Trojan called Kryptik. The Trurard malware works as a Trojan-Downloader that may allow its operators to deploy new versions of threatening programs like Nimisi and Spyeye. The Trurard Trojan-Downloader is crafted to download obfuscated software packages from remote servers, and prevent AV scanners from detecting what is being introduced into the system. You could think of the TrojanDownloader: MSIL/Trurard.A malware as a software updater for other threatening applications. Programs like the Trurard Trojan-Downloader are invaluable to cyber fraudsters that wish to stay one step ahead of AV vendors and heuristics analysis. The Trurard Trojan-Downloader has many versions that are marked by the suffix at the end of the string TrojanDownloader: MSIL/Trurard.[marker] and are discerned by their origin, runtime operation and dropped files.

TrojanDownloader: MSIL/Trurard.A is known to drop the file 79125.exe in the temp directory, and its variants may have different file names. Security experts note that the Trurard Trojan-Downloader might inject code into the svchost.exe host process to conceal its activity and prevent detection. Additionally, the variants of TrojanDownloader: MSIL/Trurard may be listed as modules of the WinRAR software. The representatives of the Trurard family of Trojan-Downloaders might introduce registry keys in the Windows Registry to make sure that the Trurard Trojan-Downloader is executed upon boot up. The TrojanDownloader: MSIL/Trurard.A malware is similar to Recslurp and Hyteod, and you can use a trusted anti-malware tool to clean up your Windows OS without experiencing problems.

Trending

Most Viewed

Loading...