arrow_back
search
close

TROJ_ALFALKKU.USVN

November 11, 2015
 ALIASES:

TrojanDownloader:Win32/Alfalkku!rfn (Microsoft), Trojan-Downloader.Win32.Genome.pzae (Kaspersky),

 PLATFORM:

Windows

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 INFORMATION EXPOSURE:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It modifies the Internet Explorer Zone Settings.

However, as of this writing, the said sites are inaccessible.

  TECHNICAL DETAILS

File Size:

40,960 bytes

File Type:

EXE

Initial Samples Received Date:

03 Nov 2015

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Web Browser Home Page and Search Page Modification

This Trojan modifies the Internet Explorer Zone Settings.

Other Details

This Trojan connects to the following possibly malicious URL:

  • http://{BLOCKED}.{BLOCKED}.189.16:8088/test/svchost.exe

However, as of this writing, the said sites are inaccessible.