solarbot

alhamad.biz (Solar http botnet hosted by softlayer.com)

Resolved alhamad.biz to 50.23.58.11 Server:  alhamad.biz Gate file:  /web/info.php Alternate domains (not currently registered): gilsoncherylfuelquest.bizburdickdoug-fuel.bizcallawayrickcanadian.bizcano-martintexas.bizcomptondeborah-exxon.bizdavenport-kirktexas.bizdearie-erin-international.bizdixon-christy-oklahoma.bizdonnellan-robert-2global.bizdoughertymichael-fhwa.bizdrewryamy-louisdreyfus.bizdudek-sabrina-nustarenergy.bizengelken-davidtank-management.bizfarishdanmurphy-oil.bizfelettoloucaboard.bizfitzgeraldjulian-sr2.biz  It also tried to connect to a gate file hosted on a hacked site at hxxp://carriesbridalcollection.com/images/1/2/cart.php Hosting infos: http://whois.domaintools.com/50.23.58.11 Related md5s (Search on Malwr.com to download samples) Solar: f83706169037cf6da4bf04469428329a

www.paloshke.org (Solar http botnet hosted by ghandi.net)

Resolved www.paloshke.org to 46.226.108.231 Server:  www.paloshke.org Gate file:  /index.php Alternate domains: www.bkcn.suwww.cahlr.comwww.rahmea.orgwww.businet.suwww.oscdfg.orgwww.monero.orgwww.webres.suwww.uwtriv.comwww.zmvnue.orgwww.oreape.comwww.xnighs.suwww.dvmnib.comwww.itmcff.orgwww.akwrzv.comwww.ivmqzc.orgwww.duvema.comwww.mtwogp.orgwww.hielah.comwww.apdekt.org Bitcoin mining infos:   -a scrypt -s 20 –no-longpoll -q -o www2.oskefi.org:443 -u anonymous.1 -p -x Hosting infos: http://whois.domaintools.com/46.226.108.231 Related md5s Solar: eafe8ed59f752d7ae8240f3cdbc698f6

cmeef.info (Solar http botnet hosted by ecatel.net)

Resolved cmeef.info to 93.174.94.64 Server:  cmeef.info Gate file:  /e6ct/index.php Hosting infos: http://whois.domaintools.com/93.174.94.64 Related md5s (Search on Malwr.com to download samples) Solar: 61fd4c9405e168557ab279c86131634b

kasvatus.org (Solar http botnet hosted by hetzner.de)

Resolved kasvatus.org to 176.9.36.18 Server:  kasvatus.org Gate file:  /solar/index.php Thanks to Xylitol for a link to the sample Hosting infos: http://whois.domaintools.com/176.9.36.18 Related md5s (Search on Malwr.com to download samples) Solar: 946c4683c72f59558d9a211a8d8971cc