94.232.248.51

[SysAdMini]

contains iframes to the following urls

Code: [Select]

win-biz.com
Luckysploit

Code: [Select]

stats-analytics.cn/lera/?t=2
exploits

Code: [Select]

statsc0unter.com/index.phphttp://wepawet.cs.ucsb.edu/view.php?hash=432023c36ca7d866af9c3e4076ea74e4&type=js

pdf exploit

Code: [Select]

statsc0unter.com/getfile.php?f=pdf[/code
http://www.virustotal.com/analisis/f8e4ddd45fbf86db619298caecb75c13



[SysAdMini]

malware calls home

Code: [Select]

system-check.nethttp://www.threatexpert.com/report.aspx?md5=3409bcce079b8f75a1088c49268b2b93