TROJ_DLOADR.OP
PLATFORM:
Windows 2000, Windows XP, Windows Server 2003
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
TECHNICAL DETAILS
File Size:
1,689,682 bytes
File Type:
EXE
Memory Resident:
No
Initial Samples Received Date:
29 Sep 2012
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Download Routine
This Trojan connects to the following website(s) to download and execute a malicious file:
- http://{BLOCKED}nloadmanager.org/DownloadFast_0.6.2.exe
Other Details
This Trojan connects to the following possibly malicious URL:
- http://www.{BLOCKED}d.com/json/formatLinks/id-b60d49808b0718c32e53421aa11d09d31465784
NOTES:
The file it downloads is detected as BKDR_RBOT.OP.