Threat Database Malware Mal/DarkShell-A

Mal/DarkShell-A

By JubileeX in Malware

Threat Scorecard

Ranking: 8,588
Threat Level: 20 % (Normal)
Infected Computers: 9,501
First Seen: September 11, 2012
Last Seen: September 3, 2023
OS(es) Affected: Windows

Mal/DarkShell-A is a Trojan that is propagates as a mischievous help (.HLP) file via social engineering. Cybercrooks strive to fool victims into

opening the malicious file and, thus, affecting their computers with a spyware keylogger. If the corrupt file is opened, an error message is

displayed. In the background, another infectious file is dropped onto the PC, which in turn creates one more file. Mal/DarkShell-A logs

keystrokes of the PC user and sends them to remote attackers.

File System Details

Mal/DarkShell-A may create the following file(s):
# File Name Detections
1. RECYCLER.DLL
2. Windows Security Center.exe
3. \Documents and Settings\username\Local Settings\Application Data\UserData.dat
4. Amministrazione.hlp

URLs

Mal/DarkShell-A may call the following URLs:

plaicecaught.com

Trending

Most Viewed

Loading...