New files for Zeus servers

[jackberri]

zeus trojan updated

Code: [Select]

http://tuk.kz/webpage/pdf.exe           md5sum ===> 77bcfd97cffe2585a1063ba86e94f4f4http://www.virustotal.com/file-scan/report.html?id=3f3dcb981de4e0fdeb19484b114087459df54bac5c4e647181550792f5115a8c-1304941521
VT 12/41 (29.3%)

[jackberri]

Code: [Select]

http://kolddozood.com/tmp3.bin           md5sum ===> e61ab6f535031c9350ebe5792f3a2a6c

[jackberri]

zeus trojan updated

Code: [Select]

http://tuk.kz/webpage/pdf.exe                   md5sum ===> a330831cc3d933f6a04cb6bd25b122bchttp://www.virustotal.com/file-scan/report.html?id=8d9fc9256246d847f133281a9c17e60fe72227bc4d800dd0955b8758ee7aff1f-1305096870
VT 6/42 (14.3%) 

[jackberri]

Code: [Select]

http://beakro.com/Sashok/server[php]/config.bin           md5sum ===> fc5bdf7ebb509410eec894d617652690

[jackberri]

zeus trojan updated

Code: [Select]

http://tuk.kz/webpage/pdf.exe         md5sum ===> 239e08871cf5d604ba38c40dff4b6a85http://www.virustotal.com/file-scan/report.html?id=6e22f3af34733266ec6fcf22268b866ba954d76d9cf64dc047ef19c27563ba61-1305288950
VT 4/41 (9.8%)

[jackberri]

Code: [Select]

http://122.224.18.36/update.exe         md5sum ===> 93e63ce88f8e4830cb83f7c3cf40cbf4http://www.virustotal.com/file-scan/report.html?id=fbd3f365f48958e15c1e43052f77346e2b4d5d036056498b3e6129a459b0b95e-1306106348
VT 33/42 (78.6%)

[jackberri]

Code: [Select]

http://faint.ir/bat/un.bin          md5sum ===> 34e4a727e9f2958c3975bfa494eb4fb6
http://faint.ir/bat/gol.php

[jackberri]

Code: [Select]

http://underfeet.ru/franklin2.bin   md5sum ===> 2c56264ea130fd9c581e36b73cfffb40

[jackberri]

updated zeus trojan

Code: [Select]

http://wurplemancerz.com/gud/chu.exe          md5sum ===> f5880321d5a51ddb6e1928ff33769e28
http://bitschoonerop.com/gud/chu.exe          md5sum ===> f5880321d5a51ddb6e1928ff33769e28         
http://www.virustotal.com/file-scan/report.html?id=b777298dcddcfeffd81744b063f03e8afe36848be6c938ebb67f24afe0f762a0-1306791371
VT 3/42 (7.1%)

[jackberri]

Code: [Select]

http://centrimedicitoscani.it/ind.pdf          md5sum ===> e7b61462268593416252b7313b272a0c

[jackberri]

IP Location: United States - New Dream Network -- Garland Data Center DREAMHOST-AS
IP 75.119.216.181
[ps29164.dreamhost.com]
AS26347
Name Server: ns1.dreamhost.com | ns2.dreamhost.com | ns3.dreamhost.com
Registrant/Email Registrant: kamyoo.com Private Registrant/kamyoo.com@proxy.dreamhost.com

Code: [Select]

http://blog.kamyoo.com/wp-includes/pomo/list.phprelated (already listed):

Code: [Select]

http://pharmasurestore.com/data/designImages/MAIN_DESIGN_1295039729.jpg

[jackberri]

Code: [Select]

hxxp://pharmasurestore.com/include/config.php

[jackberri]

Code: [Select]

hxxp://fabsnot.ru/search/baby2011.php

[jackberri]

New md5sum:

Code: [Select]

hxxp://fabsnot.ru/search/old02ziu.bin  md5sum ===> 33a15f19c3c96edfe9370ef9e113aab5

[jackberri]

Code: [Select]

hxxp://ek-kessons.co.cc/dirctory/schools/prep/obonzy-bot.exe         md5sum ===> dd20c8ba739b02485387d45f6fbb9681http://www.virustotal.com/file-scan/report.html?id=d25111c5c1b2b00a7795f22857e41fd9932db22cbff91c4f7c0f511f0d0ceaa0-1318159771
VT 16/43 (37.2%)