Author Topic: ee.souxse.cn  (Read 7106 times)

0 Members and 1 Guest are viewing this topic.

October 29, 2007, 05:20:58 pm
Read 7106 times

sowhat-x

  • Guest
Quote
hxxp://ee.souxse.cn/l/dh.exe
hxxp://ee.souxse.cn/l/dh3.exe
hxxp://ee.souxse.cn/l/wd.exe
hxxp://ee.souxse.cn/l/mh.exe
hxxp://ee.souxse.cn/l/zt.exe
hxxp://ee.souxse.cn/l/jh.exe
hxxp://ee.souxse.cn/l/my.exe
hxxp://ee.souxse.cn/l/qj.exe
hxxp://ee.souxse.cn/l/qq.exe
hxxp://ee.souxse.cn/l/dj.exe
hxxp://ee.souxse.cn/l/0.exe
hxxp://ee.souxse.cn/l/1.exe

Malware for free...that's a really evil domain >:(

October 29, 2007, 05:46:18 pm
Reply #1

sowhat-x

  • Guest
Plus more stuff from our "friends" above...

Quote
hxxp://ee.souxse.cn/down8.Exe

October 29, 2007, 07:39:38 pm
Reply #2

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964
This will be in the list soon thanks.

November 12, 2007, 12:35:25 am
Reply #3

tjs

  • Special Members
  • Sr. Member

  • Offline
  • *

  • 248
More active malware observed. Looks like the souxse downloaders hit this site for a list:
Quote
hxxp://www.souxse.cn/xuik.txt

11/11/07 @ 4.36pm:

Quote
hxxp://ee.souxse.cn/l/dh.exe
hxxp://ee.souxse.cn/l/dh3.exe
hxxp://ee.souxse.cn/l/wd.exe
hxxp://ee.souxse.cn/l/mh.exe
hxxp://ee.souxse.cn/l/zt.exe
hxxp://ee.souxse.cn/l/tl.exe
hxxp://ee.souxse.cn/l/qqhx.exe
hxxp://ee.souxse.cn/l/sf.exe
hxxp://ee.souxse.cn/l/wow.exe
hxxp://ee.souxse.cn/l/jh.exe
hxxp://ee.souxse.cn/l/my.exe
hxxp://ee.souxse.cn/l/qj.exe
hxxp://ee.souxse.cn/l/wm.exe
hxxp://ee.souxse.cn/l/qq.exe
hxxp://ee.souxse.cn/l/qq3g.exe
hxxp://ee.souxse.cn/l/zx.exe
hxxp://ee.souxse.cn/l/wl.exe
hxxp://ee.souxse.cn/l/cq.exe
hxxp://ee.souxse.cn/l/jr.exe
hxxp://ee.souxse.cn/l/dj.exe
hxxp://ee.souxse.cn/l/0.exe
hxxp://ee.souxse.cn/l/1.exe
hxxp://ee.souxse.cn/l/2.exe
hxxp://ee.souxse.cn/l/3.exe
hxxp://ee.souxse.cn/l/4.exe
hxxp://ee.souxse.cn/l/5.exe
hxxp://ee.souxse.cn/l/6.exe
hxxp://ee.souxse.cn/l/7.exe
hxxp://ee.souxse.cn/l/8.exe
hxxp://ee.souxse.cn/l/9.exe
hxxp://ee.souxse.cn/l/10.exe

-tjs

November 12, 2007, 07:25:07 am
Reply #4

sowhat-x

  • Guest
...he-he,nice work there...I had also came across this list,
but at that moment,these samples weren't accessible...
seems like these guys make their stuff unavailable on occasion,
playing "hide and seek" or so...