Virus:MacOS/Leap.A
CME number:CME-4
Date discovered:16/02/2006
Type:Worm
In the wild:Yes
Reported Infections:Low
Distribution Potential:Low
Damage Potential:Low
File size:39.596 Bytes
VDF version:6.33.01.02

 General Method of propagation:
   • Messenger


Aliases:
   •  Symantec: OSX.Leap.A
   •  Mcafee: OSX/Leap
   •  Kaspersky: IM-Worm.MSIL.Ltp.a
   •  Sophos: OSX/Leap-A
   •  Panda: Trj/Oomp.A!CME-4


Platform / OS:
   • Mac


Side effects:
   • Drops files
   • Drops a malicious file

 Files The following files are created:

– Non malicious files:
   • /tmp/pic.gz
   • /tmp/pic

– It creates the following archives containing a copy of the malware:
   • /tmp/latestpics.tgz
   • /tmp/latestpics.tar.gz
   • /tmp/apphook.tar

– /tmp/latestpics
– /tmp/hook
– /tmp/apphook

 Messenger Propagation via file
It sends a file with the following name:
   • latestpics.tgz

Description inserted by Alexander Vukcevic on Friday, February 17, 2006
Description updated by Alexander Vukcevic on Friday, February 17, 2006

Back . . . .