ks3096360.kimsufi.com(zeus banking trojans hosted in France Ovh Systems)

ks3096360.kimsufi.com DNS_TYPE_A 94.23.232.121
Port Type
24477 tcp

– HTTP Conversations:

94.23.232.121:80 – [ks3096360.kimsufi.com]
Request: GET /Zeus/config.bin
Response: 200 “OK”
74.125.224.146:80 – [www.google.com]
Request: GET /webhp
Response: 200 “OK”
94.23.232.121:80 – [ks3096360.kimsufi.com]
Request: POST /Zeus/gate.php
Response: 200 “OK”
Request: POST /Zeus/gate.php
Response: 200 “OK”

EXE FILE:
http://ks3096360.kimsufi.com/Zeus/bot.exe

hosting infos:
http://whois.domaintools.com/94.23.232.121

Categories: Uncategorized