JS_OBFUS.NRUN
PLATFORM:
Windows 2000, Windows XP, Windows Server 2003
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
Threat Type: Trojan
Destructiveness: No
Encrypted: Yes
In the wild: Yes
OVERVIEW
This Trojan may be hosted on a website and run when a user accesses the said website.
It inserts an IFRAME tag that redirects users to certain URLs.
TECHNICAL DETAILS
File Size: 2,340 bytes
File Type: Script
Initial Samples Received Date: 24 Feb 2012
Arrival Details
This Trojan may be hosted on a website and run when a user accesses the said website.
Other Details
This Trojan inserts an IFRAME tag that redirects users to the following URLs:
- http://{BLOCKED}ingpa.{BLOCKED}u:8080/images/aublbzdni.php