TROJ_PONMOCUP.CT
January 25, 2013
ALIASES:
a variant of Win32/Ponmocup.FQ trojan (Eset)
PLATFORM:
Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
![](/vinfo/imgFiles/legend.jpg)
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan arrives as a component bundled with malware/grayware packages.
It requires its main component to successfully perform its intended routine.
TECHNICAL DETAILS
File Size:
131,074 bytes
File Type:
DLL
Initial Samples Received Date:
22 Jan 2013
Arrival Details
This Trojan arrives as a component bundled with malware/grayware packages.
Other Details
This Trojan requires its main component to successfully perform its intended routine.
NOTES:
This malware exports the following functionalities which are used by its mother component:
- Communicating with malware C&C
- Hooking NtQueryInformationProcess API