To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.
Malware Overview
This backdoor is dropped by other malware. It can also be downloaded unknowingly by a user when visiting malicious Web sites.
It opens port 9103 where it listens for remote commands. It then connects certain IP addresses to send and receive information.
The said routine provides the remote user virtual control over the affected system, thus compromising system security.
More...