Threat Database Trojans TROJ_MDROP.GDL

TROJ_MDROP.GDL

By Sumo3000 in Trojans

Threat Scorecard

Ranking: 6,696
Threat Level: 20 % (Normal)
Infected Computers: 1,489
First Seen: April 18, 2012
Last Seen: September 16, 2023
OS(es) Affected: Windows

TROJ_MDROP.GDL is a kind of malware infection known as a Trojan dropper, that is, a Trojan specifically designed to install or "drop" other malware onto the victim's computer system. TROJ_MDROP.GDL is mostly distributed in spam email messages. One recent outbreak of TROJ_MDROP.GDL Trojan infections was distributed through a bogus Microsoft Word file in DOC format that claimed to contain breaking news about a recent scandal in Asian politics involving the politician Bo Xilai. However, instead of being a DOC file, the TROJ_MDROP.GDL file is actually an RTF file that also contains an embedded executable file in EXE format. While TROJ_MDROP.GDL attack also contains a DOC file with sparse news about this political scandal, this is only there to serve as a distraction while the executable runs in the background and drops other malware onto the victim's computer system.

If you have made the mistake of opening this malicious email attachment, it is highly likely that your PC has become infected with TROJ_MDROP.GDL. Steps should be taken to safeguard your computer with a reliable anti-malware application. It is also important to use a good spam filter to ensure that the email message containing TROJ_MDROP.GDL attack does not arrive into your email inbox in the first place. Making sure never to open unsolicited email attachments is the best way to avoid a TROJ_MDROP.GDL Trojan infection and similar attacks.

How TROJ_MDROP.GDL Attacks Your Computer System

Using breaking news to distribute malware is nothing new and with this Asian political scandal among the top news of April of 2012, it is no surprise that criminals are attempting to use it to infect computers with malware. It is important to understand that all unsolicited email attachments should be avoided, not only the ones corresponding to executable files. Files with DOC, PDF, and many other extensions can also be used to attack a computer system. TROJ_MDROP.GDL attack in particular will install another Trojan which is embedded within its fake DOC file, TSPY_GEDDEL.EVL. This is a common malware distribution method. Once TROJ_MDROP.GDL carries out its attack, TROJ_MDROP.GDL uses a known Microsoft exploit known as CVE-2012-0158. This system vulnerability was already patched in a critical update released by Microsoft. In order to avoid becoming infected with TROJ_MDROP.GDL, ESG malware analysts strongly recommend ensuring that you have the latest updates for your applications and operating system. TROJ_MDROP.GDL attack is ranked as a severe threat to your computer's system security and action should be taken immediately to remove TROJ_MDROP.GDL.

File System Details

TROJ_MDROP.GDL may create the following file(s):
# File Name Detections
1. %User Profile%\a.exe

URLs

TROJ_MDROP.GDL may call the following URLs:

mogeba.de

Trending

Most Viewed

Loading...