google-analystic-356.org (Carperb banking malware hosted by fartingghost.com)

Resolved google-analystic-356.org to 91.231.156.125

Server:   google-analystic-356.org
Gate file:  Not sure how carperb works for this, it seems to just post to random strings with random filetypes. You can see those here

Backup domains:
google-analystic-594.org
google-analystic-462.pro 

Neither of these has been registered yet, register them, ddos the others and steal some bots today. (won’t actually work, carperb has encrypted commands)
google-orkt45.org 
analystici-google495.pro

Sample available at hxxp://google-analystic-356.org/aaa.exe
Uploaded here for when they take it down.

Hosting infos: http://whois.domaintools.com/91.231.156.125