m.jamtes.com (ngrbot irc botnet hosted by China Hefei Chinanet Anhui Province Network)

Resolved m.jamtes.com to
Server:  m.jamtes.com
Port:  7384
Server password:  smart
Channel:  #spd
Channel password:  smart

Channel topic #spd:  !mod pdef on !mdns hxxp:// !dl hxxp:// !dl hxxp:// !s -o !j #1,#2 !dl hxxps://hotfile.com/dl/203712010/822c38b/skybe.exe

Channel topic #1:  !dl hxxp:// !dl hxxp:// !dl hxxp:// !dl hxxp://

Channel topic #2:  !dl hxxp:// !dl hxxp:// !dl hxxp:// !dl hxxp:// !dl hxxp://

Channel topic :  !dl hxxp://

Alternate domains: 

The irc server used is modified which may prevent normal clients from connecting.

Hosting infos: http://whois.domaintools.com/

Categories: Uncategorized


Anonymous - April 21, 2013 at 10:06 pm

Any sample files or spreaders? Links are dead.

I_Post_Ur_Info - April 22, 2013 at 7:18 pm

Search for any of the filenames on https://malwr.com/analysis/search/
I've uploaded all of them as publicly available samples.

Comments are closed