Malware Domain List

Malware Related => Malicious Domains => Topic started by: Malware-Web-Threats on May 23, 2009, 07:28:34 pm

Title: addobeflashplayer.net - addobeflashplayer.com
Post by: Malware-Web-Threats on May 23, 2009, 07:28:34 pm

Fake Videos Lead to Fake Flash Player
http://blog.trendmicro.com/fake-videos-lead-to-fake-flash-player/ (http://blog.trendmicro.com/fake-videos-lead-to-fake-flash-player/)


AS8262 (LIREXNET)
85.14.6.159  n2s028.hostsyst.com

Code: [Select]
hxxp://addobeflashplayer.net/flashplayer/thankyou/?installer=Flash_Player_10_for_Windows
hxxp://addobeflashplayer.net/get/flashplayer/current/
hxxp://addobeflashplayer.net/get/flashplayer/current/install_flash_player.exe
hxxp://addobeflashplayer.com/flashplayer/thankyou/?installer=Flash_Player_10_for_Windows
hxxp://addobeflashplayer.com/get/flashplayer/current/
hxxp://addobeflashplayer.com/get/flashplayer/current/install_flash_player.exe

VirusTotal (http://www.virustotal.com/analisis/b4b259610695c8158bfab12600f32d99) - 8/40 (20.00%)
ThreatExpert (http://www.threatexpert.com/report.aspx?md5=71ad0c4a4168aa98bb20e3561e505cc7)

Quote
The data identified by the following URL was then requested from the remote web server:
hxxp://nokel.ru/js/common.js

VirusTotal (http://www.virustotal.com/analisis/58a5ce1e70ee1f068d4a9e849172c38dca0226e8f7dae86a17ce7ea3c20a01d7-1243094838) - 32/38 (84.21%)