| Malware name | Script.Dldr.Iframe.BY | | Type | Script | | Affected platform | Win32 | | Media-Type | text/html | | MD5 checksum | 9DEF87D64C5475B738AA1864A0872AA9 | | Static file | no | | Filesize | 15,787 Bytes | | Side effects | Downloads a malicious file | | Propagation | No own spreading routine |
|
Description:
Files
It tries to download a file:
– The location is the following:
• http://www.vidsniches.com/top/**********static.php
Furthermore this file gets executed after it was fully downloaded. At the time of writing this file was not online for further investigation.