Home / malware

PDF

TrojanDownloader:JS/Nemucod.RH

First posted on 16 January 2017.
Source: Microsoft

Aliases :

There are no other names known for TrojanDownloader:JS/Nemucod.RH.

Explanation :

This is a generic detection for malicious JavaScript (.js) files that may be distributed as attachment to spam emails.

These scripts are very small files and are highly obfuscated. Their main payload is to download and execute malware, for example, from the following URL:

hxxps:// dl-phdzmfjh.nl/p2e.js?906521578





Analysis by Francis Tan Seng

Last update 16 January 2017

 

TOP