Win32/Lecna [Threat Name] go to Threat

Win32/Lecna.AP [Threat Variant Name]

Category trojan
Size 32768 B
Detection created Oct 07, 2017
Detection database version 16202
Aliases Trojan.DownLoad2.30422 (Dr.Web)
  TR/Dldr.Small.aspo (Avira)
Short description

Win32/Lecna.AP is a trojan which tries to download other malware from the Internet.

Installation

The trojan does not create any copies of itself.

Other information

The trojan contains a list of (2) URLs.


It tries to download several files from the addresses.


The files are stored in the following locations:

  • %windir%\­st.exe
  • %startup%\­WINWORD.EXE

The files are then executed. The HTTP protocol is used in the communication.


The trojan attempts to delete the following files:

  • %windir%\­netscv.exe
  • %startup%\­netsvc.exe

Please enable Javascript to ensure correct displaying of this content and refresh this page.