PUA_LOADMONEY
PUP.Optional.LoadMoney (Malwarebytes); a variant of Win32/AdWare.LoadMoney.NT (ESET-NOD32); Win32:LoadMoney-FA [PUP] (Avast); PUA.LoadMoney! (Yandex)
Windows
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It arrives as a component bundled with malware/grayware packages.
It requires its main component to successfully perform its intended routine. However, as of this writing, the said sites are inaccessible.
TECHNICAL DETAILS
634,976 bytes
EXE
No
06 May 2015
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
It arrives as a component bundled with malware/grayware packages.
Other Details
This Trojan connects to the following possibly malicious URL:
- http://forces.{BLOCKED}dforum.ru/get_json?{random characters}
- http://forces.{BLOCKED}roup.ru/get_json?{random characters}
It requires its main component to successfully perform its intended routine.
However, as of this writing, the said sites are inaccessible.