article thumbnail

NullMixer: oodles of Trojans in a single dropper

SecureList

NullMixer is a dropper that includes more than just specific malware families; it drops a wide variety of malicious binaries to infect the machine with, such as backdoors, bankers, downloaders, spyware and many others. Satacom sends a DNS TXT-query to ‘ reosio.com ‘ and receives a response with a base64 encoded string.

Malware 114