x.e1b2.org (ngrBot irc botnet hosted by namecheap.com)

Resolved x.e1b2.org to 192.64.114.16, 192.64.114.184

Server:  x.e1b2.org
Port:  80
Server password:  666666
Channel:  ##Rox-x01##
Topic for ##Rox-x01## is: !m on !s -n !mod usbi on !NAZEL hxxp://www8.0zz0.com/2013/05/25/23/865519528.gif !NAZEL hxxp://www12.0zz0.com/2013/05/24/15/675195622.gif !NAZEL hxxp://www12.0zz0.com/2013/05/21/06/487587018.gif
Topic for ##Rox-x01## set by xXx at Mon May 27 14:47:02 2013

The server requires SSL to connect

Alternate domains:
x.e2b3.org
x.c1d2.org
x.x1ua.org
x.x1x2.su
x.r00n.org
x.n0ur.org
x.m4r4.org

Bitcoin mining info: -a scrypt -u qwerty123.1 -p x -s 20 –no-longpoll -q -o www2.x3x4.su:666

Hosting infos:
http://whois.domaintools.com/192.64.114.165
http://whois.domaintools.com/192.64.114.184

Related md5s (search on malwr.com to download the samples):
ngrBot: fc6575ddd92b14712e9110655a911292
Bitcoin miner: 35517bae454e3f6f2c6a93cf3975fb19

Categories: Uncategorized