Home / malware

PDF

TrojanDownloader:ASX/Wimad.DD

First posted on 15 February 2012.
Source: Microsoft

Aliases :

TrojanDownloader:ASX/Wimad.DD is also known as TR/Dldr.Wimad.DD.35 (Avira).

Explanation :

TrojanDownloader:ASX/Wimad.DD is a specially crafted Advanced Systems Format (.ASF) file that attempts to download a certain file.


Top

TrojanDownloader:ASX/Wimad.DD is a specially crafted Advanced Systems Format (ASF) file. It usually arrives with a file name that has a social engineering aspect, such as "___ARESTRA___18 message in bottle mid.wma" or "alto en la torre (quality).wma".

When opened with Windows Media Player, it attempts to download a file from the website "plug<removed>installer.com. At the time of writing, the downloaded file was not available.



Analysis by Daniel Chipiristeanu

Last update 15 February 2012

 

TOP