hosted in Ukraine Poltava Tehnologii Budushego Llc)

Domain names used to control the botnet: active active not active not active not active active active

Remote Host Port Number 80 80 2009 PASS ngr

NICK n{US|XPa}dcbcoox
USER dcbcoox 0 0 :dcbcoox
JOIN #juaz ngrBot
PRIVMSG #juaz :[d=”” s=”198683 bytes”] Updated bot file “C:Documents and SettingsUserNameApplication DataXdxaxx.exe” – Download retries: 0

C&C Server:
Server Password:
Username: ibsgpzz
Nickname: n{DE|XPa}ibsgpzz
Channel: #cocl (Password: ngrBot)
Channeltopic: :!up 8a7b3d74dc8d09472b021567ecc6494a


Now talking in #juaz
Topic On: [ #juaz ] [ !up d1a976da7dc7ddbf20e005b3e4277e8e ]
Topic By: [ o0o ]
(o0o) !mdns !mdns !mdns !mdns
ChanMode: o0o sets mode [-smtMu]

hosting infos:

Categories: Uncategorized