Oct18 |
11:51 pm (UTC-7) | by
Vincent Cabuag (Senior Threat Response Engineer) |
Seen in the wild last July 2012, PE_MUSTAN.A spreads around less secured networks and is known to target systems with weak passwords. Its roots can be traced from WORM_MORTO.SM that proliferated a year before. While this tactic of brute forcing its way around the network is not new anymore, PE_MUSTAN’s presence proves that supposed secured networks still have glaring weak spots.
Like all file infectors, this new breed can rapidly infect multiple files on a single machine. It tries to infect all .EXE files, with the exception of files in folders with the following names:
- Common Files
- Internet Explorer
- Messenger
- Microsoft
- Movie Maker
- Outlook
- RECYCLER
- System Volume Information
- windows
- winnt





