ee.souxse.cn

[sowhat-x]

hxxp://ee.souxse.cn/l/dh.exe
hxxp://ee.souxse.cn/l/dh3.exe
hxxp://ee.souxse.cn/l/wd.exe
hxxp://ee.souxse.cn/l/mh.exe
hxxp://ee.souxse.cn/l/zt.exe
hxxp://ee.souxse.cn/l/jh.exe
hxxp://ee.souxse.cn/l/my.exe
hxxp://ee.souxse.cn/l/qj.exe
hxxp://ee.souxse.cn/l/qq.exe
hxxp://ee.souxse.cn/l/dj.exe
hxxp://ee.souxse.cn/l/0.exe
hxxp://ee.souxse.cn/l/1.exe

Malware for free...that's a really evil domain

[sowhat-x]

Plus more stuff from our "friends" above...

hxxp://ee.souxse.cn/down8.Exe

[JohnC]

This will be in the list soon thanks.

[tjs]

More active malware observed. Looks like the souxse downloaders hit this site for a list:

hxxp://www.souxse.cn/xuik.txt

11/11/07 @ 4.36pm:

hxxp://ee.souxse.cn/l/dh.exe
hxxp://ee.souxse.cn/l/dh3.exe
hxxp://ee.souxse.cn/l/wd.exe
hxxp://ee.souxse.cn/l/mh.exe
hxxp://ee.souxse.cn/l/zt.exe
hxxp://ee.souxse.cn/l/tl.exe
hxxp://ee.souxse.cn/l/qqhx.exe
hxxp://ee.souxse.cn/l/sf.exe
hxxp://ee.souxse.cn/l/wow.exe
hxxp://ee.souxse.cn/l/jh.exe
hxxp://ee.souxse.cn/l/my.exe
hxxp://ee.souxse.cn/l/qj.exe
hxxp://ee.souxse.cn/l/wm.exe
hxxp://ee.souxse.cn/l/qq.exe
hxxp://ee.souxse.cn/l/qq3g.exe
hxxp://ee.souxse.cn/l/zx.exe
hxxp://ee.souxse.cn/l/wl.exe
hxxp://ee.souxse.cn/l/cq.exe
hxxp://ee.souxse.cn/l/jr.exe
hxxp://ee.souxse.cn/l/dj.exe
hxxp://ee.souxse.cn/l/0.exe
hxxp://ee.souxse.cn/l/1.exe
hxxp://ee.souxse.cn/l/2.exe
hxxp://ee.souxse.cn/l/3.exe
hxxp://ee.souxse.cn/l/4.exe
hxxp://ee.souxse.cn/l/5.exe
hxxp://ee.souxse.cn/l/6.exe
hxxp://ee.souxse.cn/l/7.exe
hxxp://ee.souxse.cn/l/8.exe
hxxp://ee.souxse.cn/l/9.exe
hxxp://ee.souxse.cn/l/10.exe

-tjs

[sowhat-x]

...he-he,nice work there...I had also came across this list,
but at that moment,these samples weren't accessible...
seems like these guys make their stuff unavailable on occasion,
playing "hide and seek" or so...