PDF_MALPHISH.GOA

 Analysis by: Cris Nowell Pantanilla

 PLATFORM:

Windows

 OVERALL RISK RATING:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted: No

  • In the wild: Yes

  OVERVIEW


This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users.

However, as of this writing, the said sites are inaccessible.

  TECHNICAL DETAILS

File Size:

77,971 bytes

File Type:

PDF

Memory Resident:

No

Initial Samples Received Date:

12 Jun 2017

Arrival Details

This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users.

Other Details

This Trojan connects to the following possibly malicious URL:

  • https://{BLOCKED}t.co/{BLOCKED}zwgBpx
  • http://{BLOCKED}t.ly/{BLOCKED}Wr9q

However, as of this writing, the said sites are inaccessible.

NOTES:

Accessing the link on the PDF redirects the user to a remote website where personal information can be stolen.