W97M/Kukudro.A Trojan
W97M/Kukudro.A is a macro based Trojan dropper for Microsoft Word. The Trojan arrives in .zip archive via an e-mail attachment that contains the Word document “my_Notebook.doc”. When this word document is opened on a victim machine, the macro silently executes and extracts an executable file (666inse_1.exe). It then executes 666inse_1.exe (which we detect as W32/Sality.U).
Related Posts