Trojan.PHP.MAILER.C

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Diese Malware hat keine Verbreitungsroutine.

Diese Malware hat keine Backdoor-Routine.

Übertragungsdetails

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Verbreitung

Diese Malware hat keine Verbreitungsroutine.

Backdoor-Routine

Diese Malware hat keine Backdoor-Routine.

Einschleusungsroutine

Schleust die folgenden Dateien ein:

• {Malware File Path}\out.php → contains list of email addresses to where the created email was sent

Datendiebstahl

Folgende Daten werden gesammelt:

• Web form data
• Client IP address
• Client hostname
• Server name

Andere Details

Es macht Folgendes:

• It enables its user to create and send an e-mail to target e-mail addresses using PHP library.
• It uses the following web form to input custom information for e-mail creation purpose:
  
• It connects to the following URLs to identify the server's IP address's location:
  • http://{BLOCKED}geo.com/api/index.php
• It sends the gathered information to a specific email address.