TROJ_FONCSIR.A

October 08, 2012
 Analysis by: Christopher Daniel So
 PLATFORM:

Windows 2000, XP, Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted: No

  • In the wild: Yes

  OVERVIEW

This Trojan opens a hidden Internet Explorer window.

  TECHNICAL DETAILS

File Size:

48,640 bytes

File Type:

EXE

Memory Resident:

No

Initial Samples Received Date:

04 Oct 2010

Other Details

This Trojan connects to the following possibly malicious URL:

  • http://allcal.ru/up/conf.php
  • http://soft-freee.ru/sps/conf.php
  • http://asiaura.ru/catalog.php?n=1

It opens a hidden Internet Explorer window.