Trojan.Downloader.Kuluoz.B

By Domesticus in Trojans

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	76

First Seen:	October 22, 2012
Last Seen:	February 17, 2020
OS(es) Affected:	Windows

Trojan.Downloader.Kuluoz.B is a Trojan that strives to connect the infected computer to a remote server to receive and perform instructions, such as to download and run potentially malicious files. TrojanDownloader: Win32/Kuluoz.B can download and install other malware infections on the targeted PC. TrojanDownloader: Win32/Kuluoz.B may come as a malicious file attached to a spam email sent by attackers, for example, an email supposedly sent by Booking.com, using a spoofed email address. TrojanDownloader: Win32/Kuluoz.B can be distributed as a .ZIP or .RAR archive. The archive includes an executable file having the same file name. If TrojanDownloader: Win32/Kuluoz.B is executed, it inserts a code into the running process 'svchost.exe' which causes the malware infection creating a copy of TrojanDownloader: Win32/Kuluoz.B as a randomly named file.

TrojanDownloader: Win32/Kuluoz.B makes changes to the victimized computer that will laod TrojanDownloader: Win32/Kuluoz.B when Windows started. Trojan.Downloader.Kuluoz.B strives to connect to numerous websites using a crafted web address. The parameters passed by TrojanDownloader: Win32/Kuluoz.B to the website differs among variants of TrojanDownloader: Win32/Kuluoz.B. Trojan.Downloader.Kuluoz.B requests websites that also involve Bing.com, Twitter.com, Google.com and Fb.com to mix with malicious websites to disguise its traffic requests. When TrojanDownloader: Win32/Kuluoz.B successfully connects to a malicious website, it receives data that instructs TrojanDownloader: Win32/Kuluoz.B to download a malicious file named '3.exe', detected as another malware threat, from the website 'scbirs.ch'.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	Generic30.ABIX
Fortinet	W32/Dloader.SP!tr
Sophos	Troj/Agent-YRE
AntiVir	TR/Oficla.887621
F-Secure	Trojan:W32/Agent.DUGP
Kaspersky	Trojan.Win32.Jorik.SmartFortress2012.ty
ClamAV	Win.Trojan.Jorik-22
Avast	Win32:Crypt-OJD [Trj]
F-Prot	W32/Trojan3.EGD
CAT-QuickHeal	Trojan.Jorik.SmartFortress201
Kaspersky	Trojan-Downloader.Win32.Kuluoz.pnm
AVG	SHeur4.AQUS
Fortinet	W32/Zortob.B!tr.dldr
Ikarus	Trojan.Win32.FakeAV
AhnLab-V3	Dropper/Win32.OnlineGameHack

SpyHunter Detects & Remove Trojan.Downloader.Kuluoz.B

File System Details

Trojan.Downloader.Kuluoz.B may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	Game.exe	ea8adf1d9c6a76b39c9a3e1a5e8826f0	24
Name: Game.exe MD5: ea8adf1d9c6a76b39c9a3e1a5e8826f0 Size: 54.27 KB (54272 bytes) Detections: 24 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: February 11, 2013
2.	kijsvror.exe	96368f63031c28e313e4fd40661ba16d	6
Name: kijsvror.exe MD5: 96368f63031c28e313e4fd40661ba16d Size: 45.05 KB (45056 bytes) Detections: 6 Type: Executable File Path: %USERPROFILE%\Local Settings\Application Data Group: Malware file Last Updated: February 14, 2013
3.	cseqxapj.exe	86c0bd399addd50b8f2e45a9102346f3	2
Name: cseqxapj.exe MD5: 86c0bd399addd50b8f2e45a9102346f3 Size: 58.88 KB (58880 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Documents and Settings\ali.demiryuerek\Local Settings\Application Data Group: Malware file Last Updated: February 17, 2020
4.	ipbilqbt.exe	b9a42578cf2fdb4dfc94eb64b4467623	2
Name: ipbilqbt.exe MD5: b9a42578cf2fdb4dfc94eb64b4467623 Size: 55.29 KB (55296 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA% Group: Malware file Last Updated: October 29, 2012
5.	dexbkhhl.exe	4f393c02cb6545a68d56543471aa35af	2
Name: dexbkhhl.exe MD5: 4f393c02cb6545a68d56543471aa35af Size: 52.22 KB (52224 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Documents and Settings\Dr. Jesus Martinez\Local Settings\Application Data Group: Malware file Last Updated: November 8, 2012
6.	mdpovsjr.exe	61a2f310098b532e62da736eb0b4d7a3	2
Name: mdpovsjr.exe MD5: 61a2f310098b532e62da736eb0b4d7a3 Size: 60.41 KB (60416 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA% Group: Malware file Last Updated: December 20, 2012
7.	fraqnden.exe	8eefd53645209f12d75bcf032b334b8e	2
Name: fraqnden.exe MD5: 8eefd53645209f12d75bcf032b334b8e Size: 40.96 KB (40960 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Local Group: Malware file Last Updated: February 22, 2013
8.	sftxfaqg.exe	b475ac882aae612611f50eca6ecb057f	2
Name: sftxfaqg.exe MD5: b475ac882aae612611f50eca6ecb057f Size: 61.44 KB (61440 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Documents and Settings\Reception\Impostazioni locali\Dati applicazioni Group: Malware file Last Updated: February 22, 2013
9.	nbaravnd.exe	040f82147733e9782281afa1619c78f4	2
Name: nbaravnd.exe MD5: 040f82147733e9782281afa1619c78f4 Size: 37.37 KB (37376 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Local Group: Malware file Last Updated: March 21, 2013
10.	utlxoita.exe	cec920189f2839b71ae1c4bfb64286c9	2
Name: utlxoita.exe MD5: cec920189f2839b71ae1c4bfb64286c9 Size: 34.3 KB (34304 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Documents and Settings\Lynz Eaker\Local Settings\Application Data Group: Malware file Last Updated: April 22, 2013
11.	canhdhad.exe	dc3deedb6d1708b7827d4e1bf5844a7a	1
Name: canhdhad.exe MD5: dc3deedb6d1708b7827d4e1bf5844a7a Size: 53.76 KB (53760 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\Jan\Local Settings\Application Data Group: Malware file Last Updated: October 22, 2012
12.	ulvqvofn.exe	2544e0e8bb0047146a41272fba5c4c29	1
Name: ulvqvofn.exe MD5: 2544e0e8bb0047146a41272fba5c4c29 Size: 111.1 KB (111104 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\angelnovalbos\Local Settings\Application Data Group: Malware file Last Updated: May 8, 2013
13.	hvkexdpj.exe	0e2e1ef473bb731d462fb1c8b3dd7089	1
Name: hvkexdpj.exe MD5: 0e2e1ef473bb731d462fb1c8b3dd7089 Size: 110.08 KB (110080 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\ladair\Local Settings\Application Data Group: Malware file Last Updated: January 14, 2013
14.	hfxqghas.exe	ab25d6dbf9b041c0a7625f660cfa17aa	1
Name: hfxqghas.exe MD5: ab25d6dbf9b041c0a7625f660cfa17aa Size: 55.8 KB (55808 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE%\Local Settings\Application Data Group: Malware file Last Updated: November 27, 2012
15.	kmsiomgg.exe	eac088e02b366c535a9c3f085e28fda4	1
Name: kmsiomgg.exe MD5: eac088e02b366c535a9c3f085e28fda4 Size: 53.24 KB (53248 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Local Group: Malware file Last Updated: March 12, 2013
16.	imkxhjue.exe	775ffce4bf22c8bf60ee8753f2fc5c1d	1
Name: imkxhjue.exe MD5: 775ffce4bf22c8bf60ee8753f2fc5c1d Size: 53.24 KB (53248 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\user\Local Settings\Application Data Group: Malware file Last Updated: February 25, 2013
17.	hbkrigar.exe	0fcf4928956eb7280904acdb197e55a7	1
Name: hbkrigar.exe MD5: 0fcf4928956eb7280904acdb197e55a7 Size: 49.15 KB (49152 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\C?cile\Local Settings\Application Data Group: Malware file Last Updated: December 7, 2012
18.	dsrfcfde.exe	150cd217fce4529003fb18801c86e919	1
Name: dsrfcfde.exe MD5: 150cd217fce4529003fb18801c86e919 Size: 49.15 KB (49152 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Local Group: Malware file Last Updated: January 14, 2013
19.	nqwpxgth.exe	4225acd1a3270d00967eb26ce5efa28a	1
Name: nqwpxgth.exe MD5: 4225acd1a3270d00967eb26ce5efa28a Size: 35.32 KB (35328 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\kduron\Local Settings\Application Data Group: Malware file Last Updated: January 8, 2013
20.	kuioscff.exe	e7e1b3ef456817d4c55fa74186c9b22a	1
Name: kuioscff.exe MD5: e7e1b3ef456817d4c55fa74186c9b22a Size: 35.84 KB (35840 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Local Group: Malware file Last Updated: December 24, 2012
21.	wuimeole.exe	43f52ab8ceaccd03881cdf9210562586	1
Name: wuimeole.exe MD5: 43f52ab8ceaccd03881cdf9210562586 Size: 32.76 KB (32768 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Local Group: Malware file Last Updated: December 24, 2012
22.	uexsnpih.exe	da59d53d5feb526c9c413bee6f1be06c	1
Name: uexsnpih.exe MD5: da59d53d5feb526c9c413bee6f1be06c Size: 49.15 KB (49152 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Local Group: Malware file Last Updated: January 14, 2013
23.	amdfftsf.exe	39bb863d14f499f6eac3655a680f98b5	1
Name: amdfftsf.exe MD5: 39bb863d14f499f6eac3655a680f98b5 Size: 102.91 KB (102912 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\bsb\Local Settings\Application Data Group: Malware file Last Updated: January 21, 2013
24.	wabueibr.exe	6b02ed78ef103cae39d6fbbd13ef1afd	1
Name: wabueibr.exe MD5: 6b02ed78ef103cae39d6fbbd13ef1afd Size: 53.24 KB (53248 bytes) Detections: 1 Type: Executable File Path: %LOCALAPPDATA% Group: Malware file Last Updated: January 31, 2013
25.	annqbind.exe	72d778938bfcb3f4d380d1d970732b64	1
Name: annqbind.exe MD5: 72d778938bfcb3f4d380d1d970732b64 Size: 78.84 KB (78848 bytes) Detections: 1 Type: Executable File Path: %LOCALAPPDATA% Group: Malware file Last Updated: January 31, 2013
26.	lwjptktp.exe	f87baf26619182630b65cf57c7a84f28	1
Name: lwjptktp.exe MD5: f87baf26619182630b65cf57c7a84f28 Size: 27.13 KB (27136 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Local Group: Malware file Last Updated: February 11, 2013
27.	trnwcntl.exe	6b9dc32f593ac89cfd19312ee85f7386	1
Name: trnwcntl.exe MD5: 6b9dc32f593ac89cfd19312ee85f7386 Size: 123.39 KB (123392 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Local Group: Malware file Last Updated: March 4, 2013
28.	vpgibvqf.exe	f48a6740f2e0d70343f600be12220adc	1
Name: vpgibvqf.exe MD5: f48a6740f2e0d70343f600be12220adc Size: 37.37 KB (37376 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Local Group: Malware file Last Updated: March 21, 2013

More files

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.Downloader.Kuluoz.B

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Trojan.Downloader.Kuluoz.B

File System Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen