W2KM_DRIDEX.AX
ALIASES:
TrojanDownloader:O97M/Donoff (Microsoft), VBA/TrojanDownloader.Agent.BAK trojan (ESET), WM/TrojanDownloader.7BA9!tr (Fortinet)
PLATFORM:
Windows
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users.
TECHNICAL DETAILS
File Size:
234,419 bytes
File Type:
DOC
Initial Samples Received Date:
03 May 2016
Arrival Details
This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users.
Dropping Routine
This Trojan drops the following files:
- %User Temp%\{random number}.vbs - connects to the following possibly malicious URL:
- http://tiptop-opmaat.nl/tm.jpg?Uyr1geHTb=5