Threat Database Trojans TSPY_SPCESEND.A

TSPY_SPCESEND.A

By SpideyMan in Trojans

TSPY_SPCESEND.A is a mischievous Trojan that investigates the local drive of a corrupted PC system for MS Word and MS Excel documents. The stored documents are then archived and saved. TSPY_SPCESEND.A then uploads the created archive to the website called sendspace.com. After TSPY_SPCESEND.A has successfully uploaded the archive, it sends the produced download link and archive password to a C&C server. This routine exposes data, which may be used for malicious actions to cybercriminals. TSPY_SPCESEND.A may be downloaded from remote web pages by TROJ_DOFOIL.GE. To protect your computer from harm, uninstall TSPY_SPCESEND.A immediately after detection.

File System Details

TSPY_SPCESEND.A may create the following file(s):
# File Name Detections
1. %User Temp%\{RANDOM CHARACTERS}.zip
2. %User Temp%\{random}.zip

URLs

TSPY_SPCESEND.A may call the following URLs:

clicksportsearches.com

Trending

Most Viewed

Loading...