(smoke loader http bot hosted by Poland Artnet Spolka Z Ograniczona Odpowiedzialnoscia)

This is the http loader for the gold installs ppi program.

Resolved to

Gate file: /gamenew/index.php

Downloads files from
minsabdedf.exe bitcoin miner
pool info:

The file botnet owners are given installs smoke from hxxp://
Install statistics are then recorded by
Using the format 
activation.php?productid=(userid)&serial=(long string)

 Hosting infos:

The owner had some trouble with the coder of his crypter:

Categories: Uncategorized