xvident.pw (andromeda http botnet hosted by maxhosting.ru)

Resolved xvident.pw to

Server:  xvident.pw
Gate file:  gate.php

There is a another domain pointed to the same IP which is also hosting a andromeda panel.

Server:  plesto.pw
Gate file:  gate.php

Hosting infos: http://whois.domaintools.com/

Related md5s (search on malwr.com to download samples)
Andromeda 57e8423ba1a1d8816ba5d078fd9f64df

Categories: Uncategorized