Threat Database Trojans Troj/FSBSpy-A

Troj/FSBSpy-A

By Domesticus in Trojans

Threat Scorecard

Threat Level: 90 % (High)
Infected Computers: 2
First Seen: February 14, 2013
Last Seen: April 11, 2020
OS(es) Affected: Windows

Troj/FSBSpy-A is a Trojan that is involved in a malware campaign. Troj/FSBSpy-A uses a zero-day vulnerability to distribute itself via a targeted email, which carries information that urges the recipient to click a web-link. The web-link takes to a viper's nest of malicious components, hosted on a server in Turkey. This stage of the malware attack attempts to compromise the corrupted PC with an Adobe Flash exploit. Troj/FSBSpy-A affects only Mozilla Firefox Internet browser. Troj/FSBSpy-A is digitally signed with a legitimate certificate, or at least with a certificate that isn't simply home made, and hasn't expired. Troj/FSBSpy-A contacts a Command-and-Control (C&C) server using a fixed IP number that belongs to a hosting solution provider from the Netherlands. Troj/FSBSpy-A is able to retrieve a basic system inventory. Troj/FSBSpy-A can be remotely commanded to take and upload screenshots and to drop and execute additional malware infections.

SpyHunter Detects & Remove Troj/FSBSpy-A

File System Details

Troj/FSBSpy-A may create the following file(s):
# File Name MD5 Detections
1. setup.exe b520e9f198c365125d49e7894152eebb 0
2. 4ced1c7be1c36b487b4400c48e884cb5 4ced1c7be1c36b487b4400c48e884cb5 0
3. scode.dll 14fdb530d0b0bc94650bbe02b9d362ad 0
4. explorer.ex 66741da348171175d7be67b8b0e01318 0
5. f416219ff1f636f415d1136f8ea33b94 f416219ff1f636f415d1136f8ea33b94 0

Trending

Most Viewed

Loading...