Content menu Close

Malware descriptions

Update on new worm

Malware descriptions

minute read

Authors

We have now analysed the new worm (see below) further. It’s actually a new variant of Atak – Email-Worm.Win32.Atak.h. Some variants of this family are similar to some of the Mydoom worms.

Atak.h copies itself to the Windows system directory as dec25.exe

It writes itself to win.ini to ensure that a copy of the worm is launched each time the victim machine is started.

[windows] run=file path dec25.exe

A full description will be available soon.

Authors

Update on new worm

Your email address will not be published. Required fields are marked *

 

GReAT webinars

From the same authors

Subscribe to our weekly e-mails

The hottest research right in your inbox

In the same category

    • Latest Posts
    Latest Webinars
    Reports

    BlindEagle flying high in Latin America

    Kaspersky shares insights into the activity and TTPs of the BlindEagle APT, which targets organizations and individuals in Colombia, Ecuador, Chile, Panama and other Latin American countries.

    APT trends report Q2 2024

    The report features the most significant developments relating to APT groups in Q2 2024, including the new backdoor in Linux utility XZ, a new RAT called SalmonQT, and hacktivist activity.

    Subscribe to our weekly e-mails

    The hottest research right in your inbox

    Threats

    Threats

    Categories

    Categories

    Other sections

    © 2024 AO Kaspersky Lab. All Rights Reserved.
    Registered trademarks and service marks are the property of their respective owners.

    Subscribe to our weekly e-mails

    The hottest research right in your inbox