OSX_DOK.A
PLATFORM:
OSX
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It may arrive bundled with malware packages as a malware component.
TECHNICAL DETAILS
File Size:
50,672 bytes
File Type:
Other
Initial Samples Received Date:
26 Apr 2017
Arrival Details
This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users.
It may arrive bundled with malware packages as a malware component.
Installation
This Trojan drops a copy of itself in the following folders using different file names:
- /Users/Shared/AppStore.app
Other Details
This Trojan connects to the following possibly malicious URL:
- paoyu7gub72lykuk.onion
- {BLOCKED}.{BLOCKED}.185.136:443