VBS_BANLOAD.YWNMG
ALIASES:
VBS/Downloader.af (McAfee), Trojan-Downloader.VBS.Agent.avy (Kaspersky)
PLATFORM:
Windows
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users.
TECHNICAL DETAILS
File Size:
8,866 bytes
File Type:
VBS
Initial Samples Received Date:
27 Oct 2015
Arrival Details
This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users.
Installation
This Trojan drops the following files:
- %ApplicationData%\Flashplay\ropepxa.zip
- %ApplicationData%\Flashplay\flashx.exe
Other Details
This Trojan connects to the following possibly malicious URL:
- http://{BLOCKED}edia.hightdefinition.com/dream/weaver.zip