TrojanSpy.Win32.LOKI.TIOIBYOT

October 10, 2019
 Analysis by: Carl Maverick Pascual
 ALIASES:

Backdoor.Win32.Androm.thzm (Kaspersky) ; Trojan:Win32/Vbobfus.A!eml (Microsoft)

 PLATFORM:

Windows

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 INFORMATION EXPOSURE:

  • Threat Type: Trojan Spy

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It requires being executed with a specific argument/parameter, an additional component, or in a specific environment in order to proceed with its intended routine.

  TECHNICAL DETAILS

File Size:

999,424 bytes

File Type:

EXE

Initial Samples Received Date:

08 Oct 2019

Arrival Details

This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Other Details

This Trojan Spy requires being executed with a specific argument/parameter, an additional component, or in a specific environment in order to proceed with its intended routine.