| Name | Worm.MSH.Skowor.A |
|
| Type | Worm | |
| Author | sk0r/Czybik | |
| Written in | PowerShell | |
| Description |
I was looking for PowerShell based malware and eventually found the POC Skowor worm. The only worm written in this language. It attempts to propagate via the Kazaa P2P network by putting a copy of itself in the shared folders. As far as I see there is no typical malicious payload except it overwrites files with a specific file extension. Good to know it exists and to see how it works. |
|
| Questions | Do you have a question about this RAT/bot/worm? At the bottom of this post you find the box where you can type and send your message. | |
| Downloads | Source | |
PowerShell worm Skowor
Dec 11th, 2009 by carrumba
Leave a comment
But please respect the commenting rules. Critizism is appreciated and also general comments of course. If you're rude, I have to delete your comment. Also use your personal/nick name but avoid using business names. Have fun and thanks for participating the discussion.