HTML/Redirect.AA!tr

description-logoAnalysis

HTML/Redirect.AA!tr is a detection for an Phishing trojan.

  • Following are some of the near/exact IOCs/file hash associated with this detection:
    • 1745fc70db950ac75fb31313cc027e20

  • This malware has been observed to redirect to a certain z36[Removed].net

  • The following are some illustration(s) related to the malware during our quick analysis:

    • Figure 1: Sample page with redirect.



recommended-action-logoRecommended Action

  • Make sure that your FortiGate/FortiClient system is using the latest AV database.
  • Quarantine/delete files that are detected and replace infected files with clean backup copies.

Telemetry logoTelemetry

Detection Availability

FortiClient
Extreme
FortiMail
Extreme
FortiSandbox
Extreme
FortiWeb
Extreme
Web Application Firewall
Extreme
FortiIsolator
Extreme
FortiDeceptor
Extreme
FortiEDR

Version Updates

Date Version Detail
2022-01-25 89.09023
2020-03-13 75.93900 Sig Updated
2020-03-10 75.86700 Sig Added