PSPBrick

This page shows details and results of our analysis on the malware PSPBrick

Overview

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.


Minimum DAT

4603 (2005-10-12)

Updated DAT

4814 (2006-07-25)

Minimum Engine

5.1.00

File Length

3,848 bytes

Description Added

2005-10-11

Description Modified

2005-10-11

Malware Proliferation

Characteristics

This trojan purports to be a firmware hack for the Sony PlayStation Portable (PSP).  This trojan deletes files which are needed to start the machine.

When run, a message is displayed:

PSP TEAM 2.0 Exploit Hack the 2.0 firmware
Thank's to toc2rta for the 2.0 exploit :)

The following files are deleted:

  • /vsh/etc/index.dat 
  • /kd/loadcore.prx
  • /kd/loadexec.prx
  • /kd/init.prx

Then a final message is displayed:

Your 2.0 is hacked please reboot
Thank you PSP Team the french team
F*Ck yoshihiro and SonyxTeam Looser

(content modified with *)

Symptoms

  • The previous messages will be displayed
  • The PSP will not restart after the trojan is run

Method of Infection

Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something desirable.

Removal

-

Variants