195.88.190.245

[SysAdMini]

Fragus

Code: [Select]

195.88.190.245/show.php?s=71104b9a6ehttp://wepawet.cs.ucsb.edu/view.php?hash=4cdbb06aaccff7f995b82df284c73c5a&type=js
payload is Zeus/Zbot/Wnspoem v2 trojan

Code: [Select]

195.88.190.245/load.php?e=2http://www.virustotal.com/analisis/88f12d243df2a21008ed485d2d8d74330ec0043d599bb8da41c7e4e9ae53638c-1252742073

A request for LuckySploit url

Code: [Select]

valiboten.com/irri/?1bd3f86ca81712ec6a45340cbc884491has redirected to this Fragus kit. I've seen more of those Fragus/LuckySploit combinations in the last days.
Fragus kits redirect to LuckySploit and vice versa.