Power Loader(http malware hosted in Luxembourg Steinsel Root Sa)

HTTP Requests:
hxxp://94.242.250.178/daol/asidfk11.dat?wv=51&bt=32
hxxp://94.242.250.178/daol/oadl.php
hxxp://wickedreport.com/images/2009/05/naughty-elephant.jpg

Sample:
hxxp://tbsnpd.best.volyn.ua/dlimage11.php
hxxp://94.242.250.178/daol/asidfk11.dat

Hosting infos:
http://whois.domaintools.com/94.242.250.178

Categories: Uncategorized