HTML_PHISH.AH
August 12, 2014
ALIASES:
PWS:HTML/Phish.FD (Microsoft); Mal/Phish-A (Sophos)
PLATFORM:
Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan may be hosted on a website and run when a user accesses the said website.
TECHNICAL DETAILS
File Size: 13,283 bytes
File Type: HTML, HTM
Initial Samples Received Date: 14 May 2014
Arrival Details
This Trojan may be hosted on a website and run when a user accesses the said website.
Other Details
This Trojan connects to the following possibly malicious URL:
- http://{BLOCKED}t.com
- www.{BLOCKED}sfree.com
- {host website}/gmail.php