HTML_MALPHISH.XUAC
PLATFORM:
Windows
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan may be hosted on a website and run when a user accesses the said website.
However, as of this writing, the said sites are inaccessible.
TECHNICAL DETAILS
Arrival Details
This Trojan may be hosted on a website and run when a user accesses the said website.
Other Details
This Trojan connects to the following possibly malicious URL:
- http://{BLOCKED}x.com/administrator/help/dir/xls.php
- http://loja.{BLOCKED}ibrasil.com.br/loja/Excel/franko/Not%20Found.html
- http://loja.{BLOCKED}ibrasil.com.br/loja/Excel/franko/css
- http://loja.{BLOCKED}ibrasil.com.br/loja/Excel/franko/download.png
It does the following:
- Displays a webpage where users are tricked to enter the following:
- Email address and password
However, as of this writing, the said sites are inaccessible.