Malware Domain List

Malware Related => Malicious Domains => Topic started by: MysteryFCM on June 30, 2009, 04:20:27 pm

Title: mjackson.1ffli.com.mx + ogzhnsltk.com
Post by: MysteryFCM on June 30, 2009, 04:20:27 pm
Sunbelt tried hiding the URL, but I found it anyway ......

Init:
Code: [Select]
http://mjackson.1ffli.com.mx/x-files/
Payload:
Code: [Select]
http://mjackson.1ffli.com.mx/x-files/x-file-MJacksonsKiller.exe
Exploit:
Code: [Select]
http://ogzhnsltk.com/plugins/index.php
http://ogzhnsltk.com/plugins/getexe.php
http://ogzhnsltk.com/plugins/pdf.php

Ref:
http://sunbeltblog.blogspot.com/2009/06/michael-jackson-spam-loads-zbot-dont-go.html