Home / malware

PDF

JS.Teslader

First posted on 04 December 2015.
Source: Symantec

Aliases :

There are no other names known for JS.Teslader.

Explanation :

The Trojan arrives in a .zip file attachment in spam emails. It may be named doc.js , note.js or image.js.

When the Trojan is executed, it downloads the following file from a compromised site acting as a command-and-control server: %Temp%\175677653.exe
The Trojan may then execute this file using WScript.exe.

Last update 04 December 2015

 

TOP