Home / malwarePDF  

Trojan:JS/Fellmire.A


First posted on 16 February 2012.
Source: Microsoft

Aliases :

There are no other names known for Trojan:JS/Fellmire.A.

Explanation :

Trojan:JS/Fellmire.A is a trojan JavaScript that is embedded in certain Adobe Flash files that redirects a web browser to an unexpected website.


Top

Trojan:JS/Fellmire.A is a trojan JavaScript that is embedded in certain Adobe Flash files that redirects a web browser to an unexpected website.



Installation

This trojan is encountered when browsing a web page that contains a malicious Adobe Flash file with the trojan embedded within.



Payload

Redirects web browser
When Trojan:JS/Fellmire.A executes, it performs it redirects the web browser to an unexpected site such as one of the following:

Recent Trojan:JS/Fellmire.A samples redirect web browsers to the following domains:

  • impressioncount.com/<removed>.cgi?2
  • mybannerhosting.com/<removed>.cgi?13
  • superhostline.com/<removed>.cgi?11
  • bannerstream.net/<removed>.cgi?13
  • cpmhistory.com/<removed>.cgi?8




Analysis by Stefan Sellmer

Last update 16 February 2012

 

TOP

Malware :

Family: