46.17.100.229(irc botnet hosted in Russian Federation Mir Telematiki Ltd)

Remote Host Port Number
46.17.100.229 4443 ircd here
46.28.64.99 444
46.28.64.99 80
79.142.67.113 80

NICK N[USA|XP][vsdyciq]
USER vsdy “” “lol” :vsdy
JOIN #b0ts
PONG 422
PRIVMSG #b0ts :[Download]: Succeeded using primary method [WinInet: 279 KB]

executables:
# http://c0re.us/test.exe
# http://waterforpeople.co.cc/crypted.exe

Spyeye panel:
http://quantummechanic.cc/controlpanel/
Spyeye executable:
http://waterforpeople.co.cc/spyfud.exe.exe

hosting info:
http://whois.domaintools.com/46.17.100.229

Categories: Uncategorized