[MIRT#9568] Trojan-Spy on echat.co.kr AS4766

CastleCops -> MIRT Reports

Author: tetak PostPosted: Sat Apr 05, 2008 12:32 am    Post subject: [MIRT#9568] Trojan-Spy on echat.co.kr AS4766

Malware Alert
 
 Full Report: CastleCops Link/Trojan_Spy_malware9568.html
 
 Changed status to confirmed malware.IP Converted: 211.192.139.55

dword = 3552611127
hex1 = 0xd3c08b37
hex2 = 0xd3.0xc0.0x8b.0x37
oct = 0323.0300.0213.067
carinho.scr at this location is malware known as TR/Spy.Banker.Gen (AntiVir).View CIDR AS4766 Report: http://www.cidr-report.org/cgi-bin/as-report?as=4766

"4766 | KR | apnic | 1996-04-22 | KIXS-AS-KR Korea Telecom"<br />
Extended information for AS4766:
State/Province:
Country: kr
Responsible Domain: kornet.net
Abuse Email: abuse@kornet.net
Quote:
http://www.echat.co.kr/news/nbd/carinho.scr



CastleCops -> MIRT Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group