Author Topic: 195.88.190.245  (Read 8312 times)

0 Members and 1 Guest are viewing this topic.

September 12, 2009, 08:11:41 am
Read 8312 times

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Fragus
Code: [Select]
195.88.190.245/show.php?s=71104b9a6ehttp://wepawet.cs.ucsb.edu/view.php?hash=4cdbb06aaccff7f995b82df284c73c5a&type=js
payload is Zeus/Zbot/Wnspoem v2 trojan
Code: [Select]
195.88.190.245/load.php?e=2http://www.virustotal.com/analisis/88f12d243df2a21008ed485d2d8d74330ec0043d599bb8da41c7e4e9ae53638c-1252742073

A request for LuckySploit url
Code: [Select]
valiboten.com/irri/?1bd3f86ca81712ec6a45340cbc884491has redirected to this Fragus kit. I've seen more of those Fragus/LuckySploit combinations in the last days.
Fragus kits redirect to LuckySploit and vice versa.
Ruining the bad guy's day