[MIRT#9105] Trojan on ubilab.sunmoon.ac.kr AS9628

CastleCops -> MIRT Reports

Author: tetak PostPosted: Mon Mar 24, 2008 3:36 am    Post subject: [MIRT#9105] Trojan on ubilab.sunmoon.ac.kr AS9628

Malware Alert
 
 Full Report: CastleCops Link/Trojan_malware9105.html
 
 Changed status to confirmed malware.IP Converted: 210.119.33.193

dword = 3531022785
hex1 = 0xd27721c1
hex2 = 0xd2.0x77.0x21.0xc1
oct = 0322.0167.041.0301
postcard.gif.exe at this location is malware known as Trojan:IRC/Flood.BF (Microsoft).View CIDR AS9628 Report: http://www.cidr-report.org/cgi-bin/as-report?as=9628

"9628 | KR | apnic | 1999-08-18 | SSEM-AS-KR Seoul Education Science Research Institute"<br />
Extended information for AS9628:
State/Province:
Country: kr
Responsible Domain: jdi.co.kr
Abuse Email: abuse@jdi.co.kr
Quote:
http://ubilab.sunmoon.ac.kr/Postcards/postcard.gif.exe



CastleCops -> MIRT Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group