Home / malware

PDF

TrojanClicker:ASX/Wimad.DB

First posted on 04 February 2020.
Source: Microsoft

Aliases :

There are no other names known for TrojanClicker:ASX/Wimad.DB.

Explanation :

TrojanClicker:ASX/Wimad.DB is a detection for an Advanced Streaming Format media file (.ASF file extension) which, when opened by Windows Media Player, opens the Web browser to a particular URL. Payload Redirects to a malicious Web site When opened by Windows Media Player, this trojan opens the browser to the Web site 'dabao1.cn', which is known to host malware. As of this writing, an example of malware that is hosted in this site is Exploit:JS/MS09002.C.   Analysis by Andrei Saygo

Last update 04 February 2020

 

TOP