zxz666.darktech.org(zeus hosted in Russian Federation Moscow Ojsc Vimpelcom)

zeus sample here http://zxz666.darktech.org/zeus/builder/bot.exe

zeus config file here http://zxz666.darktech.org/zeus/builder/cfg2.bin

when u open zxz666.darktech.org u are redirected to vkontakte.ru wich ask for login
maybe masking atempt or vkontakte.ru is now used to control zeus bots

zeus samples just in case they get deleted by the hecker

hosting infos:
http://whois.domaintools.com/93.80.96.91

Categories: Uncategorized