Java/Agent.FEE2!tr

Analysis

Java/Agent.FEE2!tr is a detection for a Java trojan.
Below are some of its observed characteristics/behaviours:

• This malware may attempt to communicate with a CnC server 15[Removed].203.61.115
• This malware may also capture screen shots.
• This malware may harvests credentials from Chrome, IE and Edge.
• This malware may accesses the webcam, record video and take photos.
• This malware may record audio from the microphone.
• This malware may transfers files.
• This malware may collect general system and user information.
• This malware may steal VPN certificates.
• This malware may serve as a Key Logger.
• This malware may control the SMS system of Android devices.
• This malware may move laterally in the network.

Recommended Action

• Make sure that your FortiGate/FortiClient system is using the latest AV database.
• Quarantine/delete files that are detected and replace infected files with clean backup copies.