Malware Domain List

Malware Related => Malicious Domains => Topic started by: crunchtime on October 14, 2010, 04:00:13 pm

Title: another one for the list
Post by: crunchtime on October 14, 2010, 04:00:13 pm

Can anyone identify the kit used here:

hxxp://tr.lakenormanpropertyvaluenow.com/in.cgi?b (302)
hxxp://85.234.191.215/a/gzknczas.php
hxxp://85.234.191.215/a/gv.php
hxxp://85.234.191.215/a/ilxlcphlbpesx.pdf
hxxp://85.234.191.215/a/cujtxvkldpfvxsy.jar
hxxp://85.234.191.215/a/fucoatxqeudrbrimfrjr.exe

Title: Re: another one for the list
Post by: crunchtime on October 26, 2010, 03:47:14 am

Another example: hxxp://award4u.co.cc/imcwjlcqkpyzk.pdf

Title: Re: another one for the list
Post by: danielch1 on October 26, 2010, 12:27:34 pm

it looks like phoenix2.4