Trojan.PHP.MAILER.B

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It does not have any propagation routine.

It does not have any backdoor routine.

It gathers certain information on the affected computer.

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Propagation

This Trojan does not have any propagation routine.

Backdoor Routine

This Trojan does not have any backdoor routine.

Rootkit Capabilities

This Trojan does not have rootkit capabilities.

Information Theft

This Trojan gathers the following information on the affected computer:

• IP address
• Web form data

Other Details

This Trojan does the following:

• It enables its user to create and send an e-mail to target e-mail addresses using PHP library.
• It displays the following web form to input custom data for e-mail creation purpose:
  
• It connects to the following URLs to display images inside the webpage:
  • http://{BLOCKED}ave.com/wp/oIkQIOd.jpg
• It sends the gathered information to a specific email address.

It does not exploit any vulnerability.

It requires being hosted on a web server in order to proceed with its intended routine.