TROJ_PHISH.YTUHM
ALIASES:
DOC/Fraud.TT (ESET-NOD32)
PLATFORM:
Windows
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:
Threat Type: Trojan
Destructiveness: No
Encrypted: No
In the wild: Yes
OVERVIEW
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
TECHNICAL DETAILS
File Size:
92,095 bytes
File Type:
DOCX
Memory Resident:
No
Initial Samples Received Date:
19 Jun 2018
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Other Details
This Trojan does the following:
- This Trojan presents the user a fake message tricking them to click on the following link:
- https://{BLOCKED}-source-invoicepayment3.com
- http://{BLOCKED}t.cn/index.php/login/138/email
- http://{BLOCKED}f.cn/index.php/login/112/email