EXPL_JAVA.CZ

 Analysis by: Jaime Benigno Reyes

 ALIASES:

Exploit:Java/CVE-2012-1723.GFH (Microsoft), a variant of Java/Exploit.Agent.AU trojan (Nod32)

 PLATFORM:

Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW


This Trojan may arrive bundled with malware packages as a malware component. It may be hosted on a website and run when a user accesses the said website.

It requires its main component to successfully perform its intended routine.

  TECHNICAL DETAILS

File Size:

2,192 bytes

File Type:

Java Class

Initial Samples Received Date:

18 Dec 2012

Arrival Details

This Trojan may arrive bundled with malware packages as a malware component.

It may be hosted on a website and run when a user accesses the said website.

Other Details

This Trojan requires its main component to successfully perform its intended routine.

NOTES:

This is a JAVA class component which contains encrypted strings. This malware requires additional components to perform its intended routine. Its components may be hosted on the site where this malware is hosted.