64.120.239.219(ngrBot hosted in United States Scranton Network Operations Center Inc.)

C&C Server: 64.120.239.219:1887
Server Password:
Username: fbidqck
Nickname: n{DE|XPa}fbidqck
Channel: #pool (Password: leonis)
  Channeltopic: :~pu hxxp://www.sendspace.com/pro/dl/3qtgh8 da611193656522f073e0e64c8a65969a -r

Downloads this file wich is another ngrbotnet:hxxp://69.31.136.33/dlpro/cee0ddc1c1f7eb6a248759eaf0f4cc45/50d9e2b9/3qtgh8/bonbin.exe

sample was found by our turkish kebap friend aLiSs

hosting infos:
http://whois.domaintools.com/64.120.239.219

Categories: Uncategorized