We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Win32/Maslan
Detected by Microsoft Defender Antivirus
Aliases: Win32.Maslan (CA) Maslan (F-secure) Net-Worm.Win32.Maslan (Kaspersky) W32/Maslan (McAfee) W32/Maslan (Sophos) W32.Maslan (Symantec) WORM_MASLAN (Trend Micro)
Summary
Windows Defender Antivirus detects and removes this threat.
Win32/Maslan is a family of mass-mailing network worms that targets computers running Microsoft Windows. The worm spreads through email and peer-to-peer file-sharing applications. It can also spread to computers that have not been patched for the Windows vulnerabilities described in Microsoft Security Bulletins MS03-039 and MS04-011. The worm installs two backdoors, one of which is a variant of Win32/Sdbot. The worm has a stealth component that hides certain files and directories.