Detect Date 02/17/2016
Class Trojan-Dropper
Platform Win32

Malware of this family creates a file on an infected computer and copies malicious code to the file. Then the malware either runs the file, or creates a process and runs the file inside of the newly created process.

This malware also inserts itself into system processes and user processes. Once its “work” is complete, the malware deletes itself from the infected computer.

Geographical distribution of attacks by the Trojan-Dropper.Win32.Dapato family

Geographical distribution of attacks during the period from 17 February 2015 to 17 February 2016

Top 10 countries with most attacked users (% of total attacks)

Country % of users attacked worldwide*
1 Iran 28.52
2 Russian Federation 22.73
3 Brazil 7.83
4 India 4.25
5 Ukraine 3.13
6 Germany 2.45
7 USA 2.40
8 Afghanistan 2.32
9 Kazakhstan 1.67
10 Vietnam 1.65

* Percentage among all unique Kaspersky users worldwide who were attacked by this malware

Find out the statistics of the threats spreading in your region