Threat Database Backdoors BKDR_MAKADOCS.JG

BKDR_MAKADOCS.JG

By Domesticus in Backdoors

Threat Scorecard

Ranking: 4,122
Threat Level: 10 % (Normal)
Infected Computers: 1,934
First Seen: March 28, 2013
Last Seen: September 19, 2023
OS(es) Affected: Windows

BKDR_MAKADOCS.JG is a backdoor Trojan that affects Windows 8 PC users and uses Google Docs for its C&C communication to block easy detection and removal from the attacked computer system. BKDR_MAKADOCS.JG opens a back door on the corrupted PC. BKDR_MAKADOCS.JG also aims at stealing information from the infeted computer. While being run, BKDR_MAKADOCS.JG creates the particular mutex so that only one instance of it launches on the victimized computer system. BKDR_MAKADOCS.JG connects to Google docs and uses it as a proxy in order to get instructions from the particular command-and-control (C&C) server. BKDR_MAKADOCS.JG executes the commands from a remote attacker such as stops itself, changes IP, opens command line and downloads and executes files. BKDR_MAKADOCS.JG can drop and run malevolent files, open a console, exit and erase itself on the affected PC. BKDR_MAKADOCS.JG collects computer data such as user name, local admin user name, current folder path, operating system type, and other of the corrupted PC and transmits it to a remote location. BKDR_MAKADOCS.JG uses the domain name 'docs.google.com' as its proxy server to connect to its C&C to bypass the detection and removal.

URLs

BKDR_MAKADOCS.JG may call the following URLs:

https://feed.mystreamssearch.com

Trending

Most Viewed

Loading...