Email-Worm.VBS.Staple

Class Email-Worm
Platform VBS
Description

Technical Details

This is Internet worm that spreads via E-mail by sending infected messages from affected computers. While spreading the worm uses MS Outlook and sends itself to addresses that are stored in MS Outlook Address Book.

The worm arrives on computer as email message with attached VBS file, that is worm itself. The message in original worm version has:

The Subject: RE:Injustice
Message body:

Dear [address],
Did you send the attached message, I was not expecting
this from you!

Attached file name: injustice.TXT.vbs

Being activated by a user (by double click on attached file) the worm opens MS Outlook, gets access to the Address Book, gets up to 50 addresses from each adresslist and sends messages with its attached copy to all of them. The
message subject, body and attached file name are the same as above.

Additionaly, each time worm activated it sends infected messages to 25 addresses, that are specified inside worm body.

To prevent duplicate sending of infected messages to the same addresses, the worm marks each address used.

After all the worm opens six Internet Explorer windows with different links and also displays message:

HELP US TO STOP THE BLOOD SHED!!
PLEASE ACCEPT MY APOLOGIES FOR DISTURBING YOU.
Remember that one day YOU may be in this situation.
We need every possible help.
Israeli soldiers killed in cold blood 12 year old Palestinian child
Mohammad Al-Durra, as his father tried to protect him in vain with
his own body. As a result of the indiscriminate and excessive use of
machine gun fire by Israeli soldiers, journalists and bystanders
watched helplessly as the child was savagely murdered.
Palestinian Red Crescent Society medic Bassam Balbeisi
attempted to intervene and spare the child’s life but live
ammunition to his chest by Israeli fire took his life in the process.
The child and the medic were grotesquely murdered in cold blood.
Mohammad’s father, Jamal, was critically injured and permanently
paralyzed. Similarly, approximately 40 children were slain, without
the media taking notice or covering these tragedies.
THESE CRIMINAL ACTS CANNOT BE FORGIVEN OR FORGOTTEN!!!!