Win32.VaccineTop

---

Posted: 2015-11-30 by Admin

---

Win32.VaccineTop is a fake anti malware application. It Installs itself for autostart at the Windows startup. Win32.VaccineTop is compressed with UPX. MD5: 618ee80867079f026356bd37a2ec9c94 SHA1: 97961861ee41f7c390fd0318e8a4bad38c8e63f0 SHA256: e03c80d8370e218f55ba87dd9f015360b0dd92baa54ff2bb5b45e88c31d3df9c It contacts 2 Domains:

vaccinetop.co.kr 	 115.68.58.66
update.vaccinetop.co.kr  115.68.58.72

It drops 2 Files:

vaccinetopsvc.exe
vcncmndb.dll

Win32.VaccineTop installs itself to C:\Program Files\vaccinetop and it installs a new Toolbar for the Internet Explorer.