Trojan.Downloader.Kuluoz.B

By Domesticus in Trojans

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	76

First Seen:	October 22, 2012
Last Seen:	February 17, 2020
OS(es) Affected:	Windows

Trojan.Downloader.Kuluoz.B is a Trojan that strives to connect the infected computer to a remote server to receive and perform instructions, such as to download and run potentially malicious files. TrojanDownloader: Win32/Kuluoz.B can download and install other malware infections on the targeted PC. TrojanDownloader: Win32/Kuluoz.B may come as a malicious file attached to a spam email sent by attackers, for example, an email supposedly sent by Booking.com, using a spoofed email address. TrojanDownloader: Win32/Kuluoz.B can be distributed as a .ZIP or .RAR archive. The archive includes an executable file having the same file name. If TrojanDownloader: Win32/Kuluoz.B is executed, it inserts a code into the running process 'svchost.exe' which causes the malware infection creating a copy of TrojanDownloader: Win32/Kuluoz.B as a randomly named file.

TrojanDownloader: Win32/Kuluoz.B makes changes to the victimized computer that will laod TrojanDownloader: Win32/Kuluoz.B when Windows started. Trojan.Downloader.Kuluoz.B strives to connect to numerous websites using a crafted web address. The parameters passed by TrojanDownloader: Win32/Kuluoz.B to the website differs among variants of TrojanDownloader: Win32/Kuluoz.B. Trojan.Downloader.Kuluoz.B requests websites that also involve Bing.com, Twitter.com, Google.com and Fb.com to mix with malicious websites to disguise its traffic requests. When TrojanDownloader: Win32/Kuluoz.B successfully connects to a malicious website, it receives data that instructs TrojanDownloader: Win32/Kuluoz.B to download a malicious file named '3.exe', detected as another malware threat, from the website 'scbirs.ch'.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	Generic30.ABIX
Fortinet	W32/Dloader.SP!tr
Sophos	Troj/Agent-YRE
AntiVir	TR/Oficla.887621
F-Secure	Trojan:W32/Agent.DUGP
Kaspersky	Trojan.Win32.Jorik.SmartFortress2012.ty
ClamAV	Win.Trojan.Jorik-22
Avast	Win32:Crypt-OJD [Trj]
F-Prot	W32/Trojan3.EGD
CAT-QuickHeal	Trojan.Jorik.SmartFortress201
Kaspersky	Trojan-Downloader.Win32.Kuluoz.pnm
AVG	SHeur4.AQUS
Fortinet	W32/Zortob.B!tr.dldr
Ikarus	Trojan.Win32.FakeAV
AhnLab-V3	Dropper/Win32.OnlineGameHack

SpyHunter Detects & Remove Trojan.Downloader.Kuluoz.B

File System Details

Trojan.Downloader.Kuluoz.B may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	Game.exe	ea8adf1d9c6a76b39c9a3e1a5e8826f0	24
Name: Game.exe MD5: ea8adf1d9c6a76b39c9a3e1a5e8826f0 Size: 54.27 KB (54272 bytes) Detections: 24 Type: Executable File Path: %APPDATA%\ Group: Malware file Last Updated: February 11, 2013
2.	kijsvror.exe	96368f63031c28e313e4fd40661ba16d	6
Name: kijsvror.exe MD5: 96368f63031c28e313e4fd40661ba16d Size: 45.05 KB (45056 bytes) Detections: 6 Type: Executable File Path: %USERPROFILE%\Local Settings\Application Data\ Group: Malware file Last Updated: February 14, 2013
3.	cseqxapj.exe	86c0bd399addd50b8f2e45a9102346f3	2
Name: cseqxapj.exe MD5: 86c0bd399addd50b8f2e45a9102346f3 Size: 58.88 KB (58880 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Documents and Settings\ali.demiryuerek\Local Settings\Application Data\ Group: Malware file Last Updated: February 17, 2020
4.	ipbilqbt.exe	b9a42578cf2fdb4dfc94eb64b4467623	2
Name: ipbilqbt.exe MD5: b9a42578cf2fdb4dfc94eb64b4467623 Size: 55.29 KB (55296 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA%\ Group: Malware file Last Updated: October 29, 2012
5.	dexbkhhl.exe	4f393c02cb6545a68d56543471aa35af	2
Name: dexbkhhl.exe MD5: 4f393c02cb6545a68d56543471aa35af Size: 52.22 KB (52224 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Documents and Settings\Dr. Jesus Martinez\Local Settings\Application Data\ Group: Malware file Last Updated: November 8, 2012
6.	mdpovsjr.exe	61a2f310098b532e62da736eb0b4d7a3	2
Name: mdpovsjr.exe MD5: 61a2f310098b532e62da736eb0b4d7a3 Size: 60.41 KB (60416 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA%\ Group: Malware file Last Updated: December 20, 2012
7.	fraqnden.exe	8eefd53645209f12d75bcf032b334b8e	2
Name: fraqnden.exe MD5: 8eefd53645209f12d75bcf032b334b8e Size: 40.96 KB (40960 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Users\stephanie\AppData\Local\ Group: Malware file Last Updated: February 22, 2013
8.	sftxfaqg.exe	b475ac882aae612611f50eca6ecb057f	2
Name: sftxfaqg.exe MD5: b475ac882aae612611f50eca6ecb057f Size: 61.44 KB (61440 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Documents and Settings\Reception\Impostazioni locali\Dati applicazioni\ Group: Malware file Last Updated: February 22, 2013
9.	nbaravnd.exe	040f82147733e9782281afa1619c78f4	2
Name: nbaravnd.exe MD5: 040f82147733e9782281afa1619c78f4 Size: 37.37 KB (37376 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Users\User\AppData\Local\ Group: Malware file Last Updated: March 21, 2013
10.	utlxoita.exe	cec920189f2839b71ae1c4bfb64286c9	2
Name: utlxoita.exe MD5: cec920189f2839b71ae1c4bfb64286c9 Size: 34.3 KB (34304 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Documents and Settings\Lynz Eaker\Local Settings\Application Data\ Group: Malware file Last Updated: April 22, 2013
11.	canhdhad.exe	dc3deedb6d1708b7827d4e1bf5844a7a	1
Name: canhdhad.exe MD5: dc3deedb6d1708b7827d4e1bf5844a7a Size: 53.76 KB (53760 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\Jan\Local Settings\Application Data\ Group: Malware file Last Updated: October 22, 2012
12.	ulvqvofn.exe	2544e0e8bb0047146a41272fba5c4c29	1
Name: ulvqvofn.exe MD5: 2544e0e8bb0047146a41272fba5c4c29 Size: 111.1 KB (111104 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\angelnovalbos\Local Settings\Application Data\ Group: Malware file Last Updated: May 8, 2013
13.	hvkexdpj.exe	0e2e1ef473bb731d462fb1c8b3dd7089	1
Name: hvkexdpj.exe MD5: 0e2e1ef473bb731d462fb1c8b3dd7089 Size: 110.08 KB (110080 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\ladair\Local Settings\Application Data\ Group: Malware file Last Updated: January 14, 2013
14.	hfxqghas.exe	ab25d6dbf9b041c0a7625f660cfa17aa	1
Name: hfxqghas.exe MD5: ab25d6dbf9b041c0a7625f660cfa17aa Size: 55.8 KB (55808 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE%\Local Settings\Application Data\ Group: Malware file Last Updated: November 27, 2012
15.	kmsiomgg.exe	eac088e02b366c535a9c3f085e28fda4	1
Name: kmsiomgg.exe MD5: eac088e02b366c535a9c3f085e28fda4 Size: 53.24 KB (53248 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\marcia.mousaad\AppData\Local\ Group: Malware file Last Updated: March 12, 2013
16.	imkxhjue.exe	775ffce4bf22c8bf60ee8753f2fc5c1d	1
Name: imkxhjue.exe MD5: 775ffce4bf22c8bf60ee8753f2fc5c1d Size: 53.24 KB (53248 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\user\Local Settings\Application Data\ Group: Malware file Last Updated: February 25, 2013
17.	hbkrigar.exe	0fcf4928956eb7280904acdb197e55a7	1
Name: hbkrigar.exe MD5: 0fcf4928956eb7280904acdb197e55a7 Size: 49.15 KB (49152 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\C?cile\Local Settings\Application Data\ Group: Malware file Last Updated: December 7, 2012
18.	dsrfcfde.exe	150cd217fce4529003fb18801c86e919	1
Name: dsrfcfde.exe MD5: 150cd217fce4529003fb18801c86e919 Size: 49.15 KB (49152 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\MG\AppData\Local\ Group: Malware file Last Updated: January 14, 2013
19.	nqwpxgth.exe	4225acd1a3270d00967eb26ce5efa28a	1
Name: nqwpxgth.exe MD5: 4225acd1a3270d00967eb26ce5efa28a Size: 35.32 KB (35328 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\kduron\Local Settings\Application Data\ Group: Malware file Last Updated: January 8, 2013
20.	kuioscff.exe	e7e1b3ef456817d4c55fa74186c9b22a	1
Name: kuioscff.exe MD5: e7e1b3ef456817d4c55fa74186c9b22a Size: 35.84 KB (35840 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\mbastias\AppData\Local\ Group: Malware file Last Updated: December 24, 2012
21.	wuimeole.exe	43f52ab8ceaccd03881cdf9210562586	1
Name: wuimeole.exe MD5: 43f52ab8ceaccd03881cdf9210562586 Size: 32.76 KB (32768 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\Marga Hohr\AppData\Local\ Group: Malware file Last Updated: December 24, 2012
22.	uexsnpih.exe	da59d53d5feb526c9c413bee6f1be06c	1
Name: uexsnpih.exe MD5: da59d53d5feb526c9c413bee6f1be06c Size: 49.15 KB (49152 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\Gast\AppData\Local\ Group: Malware file Last Updated: January 14, 2013
23.	amdfftsf.exe	39bb863d14f499f6eac3655a680f98b5	1
Name: amdfftsf.exe MD5: 39bb863d14f499f6eac3655a680f98b5 Size: 102.91 KB (102912 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\bsb\Local Settings\Application Data\ Group: Malware file Last Updated: January 21, 2013
24.	wabueibr.exe	6b02ed78ef103cae39d6fbbd13ef1afd	1
Name: wabueibr.exe MD5: 6b02ed78ef103cae39d6fbbd13ef1afd Size: 53.24 KB (53248 bytes) Detections: 1 Type: Executable File Path: %LOCALAPPDATA%\ Group: Malware file Last Updated: January 31, 2013
25.	annqbind.exe	72d778938bfcb3f4d380d1d970732b64	1
Name: annqbind.exe MD5: 72d778938bfcb3f4d380d1d970732b64 Size: 78.84 KB (78848 bytes) Detections: 1 Type: Executable File Path: %LOCALAPPDATA%\ Group: Malware file Last Updated: January 31, 2013
26.	lwjptktp.exe	f87baf26619182630b65cf57c7a84f28	1
Name: lwjptktp.exe MD5: f87baf26619182630b65cf57c7a84f28 Size: 27.13 KB (27136 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\Linda\AppData\Local\ Group: Malware file Last Updated: February 11, 2013
27.	trnwcntl.exe	6b9dc32f593ac89cfd19312ee85f7386	1
Name: trnwcntl.exe MD5: 6b9dc32f593ac89cfd19312ee85f7386 Size: 123.39 KB (123392 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\GuestAccount\AppData\Local\ Group: Malware file Last Updated: March 4, 2013
28.	vpgibvqf.exe	f48a6740f2e0d70343f600be12220adc	1
Name: vpgibvqf.exe MD5: f48a6740f2e0d70343f600be12220adc Size: 37.37 KB (37376 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\KG\AppData\Local\ Group: Malware file Last Updated: March 21, 2013