Home / malwarePDF  

TrojanDropper:Win32/Spallsade.A


First posted on 15 August 2012.
Source: Microsoft

Aliases :

There are no other names known for TrojanDropper:Win32/Spallsade.A.

Explanation :



TrojanDropper:Win32/Spallsade.A is a trojan that drops and executes malware, detected as TrojanDownloader:Win32/Spallsade.A, onto your computer.



Installation

TrojanDropper:Win32/Spallsade.A may be distributed as an image file or screensaver.

In the wild, we have observed the trojan being distributed through social networking and instant messenger channels, as the following:

1340915_IMG045747-JPG.scr

If you open this file, the malware will run.



Payload

Drops and executes other malware

The trojan drops and executes the malware TrojanDownloader:Win32/Spallsade.A in the %Temp% directory under a random file name.

Additional information

We have observed TrojanDropper:Win32/Spallsade.A employing anti-debugging techniques in an effort to hinder analysis.



Analysis by Zarestel Ferrer

Last update 15 August 2012

 

TOP