Related ZeuSbotnet malware

[jackberri]

IP Location: United States - NJIIX.net  - NJIIX-1 NJIIX.net
IP 64.20.35.3
[reverse35-2.reserver.ru]
AS19318
Registrant/Registrant Email: Tom Breckenridge/breckenridge56@hotmail.com

Code: [Select]

hxxp://feearts.com/werber/files/216-1.exemd5sum ===> 75b9a533fda3fca7b0d732a250c62696
SHA256 ===>  5caf67a2daac35f3077257930a187e7ff3f0b5235eb5f06ac126b2599386aa11
http://www.virustotal.com/es/analisis/5caf67a2daac35f3077257930a187e7ff3f0b5235eb5f06ac126b2599386aa11-1278434010
VT 39/41 (95.13%)

Code: [Select]

hxxp://feearts.com/werber/files/216_stealth.exemd5sum ===> 185ab974cc166b748e9bdaf1ec13b0fb
SHA256 ===>  bb330cf9500816b581c116357e2f87f09de0c8b236e1f192585e2e80af2790cf
http://www.virustotal.com/es/analisis/bb330cf9500816b581c116357e2f87f09de0c8b236e1f192585e2e80af2790cf-1278434200
VT 23/41 (56.1%)

Code: [Select]

hxxp://feearts.com/werber/files/new_bb.exemd5sum ===> dfe5605b90ef0062bdf1edb18b604bf0
SHA256 ===>  a8b971168cca708ceacbb031fba41109806e57f906f4843b21e4cfc359e713c1
http://www.virustotal.com/es/analisis/a8b971168cca708ceacbb031fba41109806e57f906f4843b21e4cfc359e713c1-1278434399
VT 5/41 (12.20%)

Code: [Select]

hxxp://feearts.com/werber/files_temp/new_bb.exe.cryptedmd5sum ===> 257ee2bf625dabc2b890aee47d69a8e5
SHA256 ===>  581b0420f29298bf288bc51f3415cdccfcbf0391f2c8c7b5a857d19f132406d6
http://www.virustotal.com/es/analisis/581b0420f29298bf288bc51f3415cdccfcbf0391f2c8c7b5a857d19f132406d6-1278457102
VT 0/41 (0%)

Code: [Select]

hxxp://feearts.com/werber/files/bb_grp6.exemd5sum ===> 8816c6310fbd1e6b7fbf1caf946ad658
SHA256 ===>  43eb82e2bf0786a065d41f88e1473e7b5e9081a7e834be2e0d5486183ae161b5
http://www.virustotal.com/es/analisis/43eb82e2bf0786a065d41f88e1473e7b5e9081a7e834be2e0d5486183ae161b5-1278434798
VT 7/41 (17.08%)

Code: [Select]

hxxp://feearts.com/werber/files/bb_grp7.exemd5sum ===> 40e73eb171f0ee32aab8f0dc8214a815
SHA256 ===>  bd461869f8465229cbd3ef14299cbaa3edf8db3078009f0b841a1eb10bbf28be
http://www.virustotal.com/es/analisis/bd461869f8465229cbd3ef14299cbaa3edf8db3078009f0b841a1eb10bbf28be-1278435012
VT 5/41 (12.2%)

Code: [Select]

hxxp://feearts.com/werber/files/bb_us_grp2.exemd5sum ===> 39debfad0b05f87345a5d0a67d85685f
SHA256 ===>  1a1791b1a981b593749ad5ec55334844aec6d6d56495b0304076718ea5ae57c5
http://www.virustotal.com/es/analisis/1a1791b1a981b593749ad5ec55334844aec6d6d56495b0304076718ea5ae57c5-1278435244
VT 7/41 (17.08%)

Code: [Select]

hxxp://feearts.com/werber/files/bb_us_grp1.exemd5sum ===> 089b7a0db30af7f6a0f8449f005e7c58
SHA256 ===>  35f17b5407230ea4771a2b72441dc2b0ee5e515e42979982169ac59e20458bf6
http://www.virustotal.com/es/analisis/35f17b5407230ea4771a2b72441dc2b0ee5e515e42979982169ac59e20458bf6-1278435376
VT 7/41 (17.08%)

Code: [Select]

hxxp://feearts.com/werber/files/bb_all_grp1.exemd5sum ===> 40a8f4d01e2b2f7915e9b19a31967f58
SHA256 ===>  1aa3f2aa76a2b96e12f93b9cd9d96f9aa7c513241e25b10efb9c609f4505856b
http://www.virustotal.com/es/analisis/1aa3f2aa76a2b96e12f93b9cd9d96f9aa7c513241e25b10efb9c609f4505856b-1278456866
VT 29/41 (70.74%)