91.212.41.119

[Malware-Web-Threats]

PDF Exploit / Trojan

Code: [Select]

hxxp://bikpakoc.cn/nuc/index.php
hxxp://bikpakoc.cn/nuc/exe.php
hxxp://bikpakoc.cn/nuc/spl/pdf.pdf
VirusTotal - 6/40 (15.00%)
Wepawet
Wepawet

VirusTotal - 16/40 (40.00%)

[SysAdMini]

redirects to exploits at bikpakoc.cn at same ip

Code: [Select]

silzefos.cn/s/in.cgi?10

Code: [Select]

silzefos.cn/nuc/index.php
pdf exploit

Code: [Select]

silzefos.cn/nuc/spl/pdf.pdfhttp://www.virustotal.com/analisis/633f5bf8ef0a03fe1e8e00a3350aa1acd3174d7f0dbc16fc9c9bac747a59f7a5-1243165950 16/39

trojan

Code: [Select]

silzefos.cn/nuc/exe.phphttp://www.virustotal.com/analisis/2e6fe7941812a6574dbd1da1d8952389ede8b2ba89ac93603a58f32152d7d64d-1243195206 5/39