JS_FAREIT.DM

January 29, 2016

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Jennifer Gumban

---

 PLATFORM:

Windows

 OVERALL RISK RATING:

 DAMAGE POTENTIAL:

 DISTRIBUTION POTENTIAL:

 REPORTED INFECTION:

 INFORMATION EXPOSURE:

• 
  Threat Type: Trojan
• 
  Destructiveness: No
• 
  Encrypted:
• 
  In the wild: Yes

  OVERVIEW

This Trojan may be hosted on a website and run when a user accesses the said website.

  TECHNICAL DETAILS

Arrival Details

This Trojan may be hosted on a website and run when a user accesses the said website.

Download Routine

This Trojan saves the files it downloads using the following names:

• %TEMP%\{random numbers}.exe

It downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the following parameter(s) passed on to it by its components:

• http://{parameter}/viewtopic.php