JS_BLACOLE.SMAO
ALIASES:
Trojan:Win32/Quidvetis.A (Microsoft), JS/Exploit-Blacole.em (McAfee)
PLATFORM:
Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan may be hosted on a website and run when a user accesses the said website.
However, as of this writing, the said sites are inaccessible.
TECHNICAL DETAILS
File Size:
24,506 bytes
Initial Samples Received Date:
05 Jul 2013
Arrival Details
This Trojan may be hosted on a website and run when a user accesses the said website.
Other Details
This Trojan connects to the following possibly malicious URL:
- http://{BLOCKED}ru.ru/count29.php
However, as of this writing, the said sites are inaccessible.