Malware Domain List

Malware Related => Malicious Domains => Eurohost LLC => Topic started by: Malware-Web-Threats on May 11, 2009, 11:47:13 pm

Title: 91.212.65.133
Post by: Malware-Web-Threats on May 11, 2009, 11:47:13 pm
redirects:
Code: [Select]
hxxp://addtracker.info/index.php

exploits:
Code: [Select]
hxxp://orgsite.info/ine/index.php
Wepawet (http://wepawet.iseclab.org/view.php?hash=14aeada8d807b815d9393e4878b3c0b9&type=js)

pdf file:
Code: [Select]
hxxp://orgsite.info/ine/action.php?id=5b45cb646a4169ff8b8dd244177c7e79
hxxp://orgsite.info/ine/action2.php?id=5b45cb646a4169ff8b8dd244177c7e79
hxxp://orgsite.info/ine/action3.php?id=5b45cb646a4169ff8b8dd244177c7e79

trojan
Code: [Select]
hxxp://orgsite.info/ine/pics.php?id=5b45cb646a4169ff8b8dd244177c7e79
Quote
File:   MS-DOS executable PE  for MS Windows (GUI) Intel 80386 32-bit
   Strings:SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
   Strings:r.exe
   Strings:http:/
Size:   65536 bytes,
MD5:   545f5a18a4a45c5c00752cefda87e92d