HKTL_FFASVIEW

May 22, 2015
 Analysis by: Miguel Carlo Ang
 ALIASES:

HackTool:Win32/BrowserPassview(Microsoft);not-a-virus:PSWTool.Win32.NetPass.bsn(Kaspersky);PUP.PassView(Malwarebytes)

 PLATFORM:

Windows

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 INFORMATION EXPOSURE:

  • Threat Type: Hacking Tool

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This hacking tool arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

  TECHNICAL DETAILS

File Size:

349,792 bytes

File Type:

EXE

Initial Samples Received Date:

18 Jul 2013

Arrival Details

This hacking tool arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This hacking tool drops the following files:

  • {Current Folder of file}\report.html ->username - password report
  • {Current Folder of file}\{current filename of HKTL_FFASVIEW}.cfg -> config file
  • {Folder path}\{filename}.txt ->exported username and password