tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5862
|
Posted: Sun Aug 26, 2007 12:51 am Post subject: [MIRT#544] Trojan on 82.208.60.239 AS15685 |
|
|
Malware Alert Full Report: /Trojan_malware544.html Changed status to confirmed malware. IP Converted: 82.208.60.239
dword = 1389378799
hex1 = 0x52d03cef
hex2 = 0x52.0xd0.0x3c.0xef
oct = 0122.0320.074.0357
View CIDR AS15685 Report: http://www.cidr-report.org/cgi-bin/as-report?as=15685
"15685 | CZ | ripencc | 2000-09-11 | AS15685 Casablanca INT Autonomous system"<br />
Extended information for AS15685:
State/Province:
Country: cz
Responsible Domain: casablanca.cz
Abuse Email: postmaster@casablanca.cz
xar5043v7.exe at this location is a Trojan-Downloader.Win32.Alphabet.gen Trojan as seen by Kaspersky
| Quote: | | http://void.truth-is-out-there.org/xar5043v7.exe |
|
|