irc.chimon.us(irc botnet hosted in Netherlands Amsterdam Denkers Ict – Ipv4 Infrastructure)

Remote Host Port Number
46.21.169.42 6567 PASS s1m0n3t4

70.38.98.238 80

MODE [SI|USA|00|P|96374] -ix
JOIN #update# c1rc0dusoleil
PRIVMSG #update# :[Dl]: File download: 92.0KB to: C:DOCUME~1UserNameLOCALS~1Temperaseme_15573.exe @ 92.0KB/sec.
QUIT [Update]: Updating to new bin.
NICK [SI|USA|00|P|32275]
USER XP-5843 * 0 :COMPUTERNAME
MODE [SI|USA|00|P|32275] -ix
JOIN #sax# c1rc0dusoleil
NICK [SI|USA|00|P|96374]
USER XP-3818 * 0 :COMPUTERNAME

exe file:
http://80dfeb1f.miniurls.co

infos about hosting:
http://whois.domaintools.com/46.21.169.42

Categories: Uncategorized