[MIRT#9609] Backdoor on 202.72.194.21 AS18153

CastleCops -> MIRT Reports

Author: tetak PostPosted: Sun Apr 06, 2008 1:38 pm    Post subject: [MIRT#9609] Backdoor on 202.72.194.21 AS18153

Malware Alert
 
 Full Report: CastleCops Link/Backdoor_malware9609.html
 
 Changed status to confirmed malware.IP Converted: 202.72.194.21

dword = 3393765909
hex1 = 0xca48c215
hex2 = 0xca.0x48.0xc2.0x15
oct = 0312.0110.0302.025
card.exe at this location is malware known as Backdoor.IRC.Zapchast.g (Kaspersky).View CIDR AS18153 Report: http://www.cidr-report.org/cgi-bin/as-report?as=18153

"18153 | ID | apnic | 2002-03-25 | MULTIDATA-ID-AP PT Multidata Rancana Prima"<br />
Extended information for AS18153:
State/Province:
Country: id
Responsible Domain: multidata.net.id
Abuse Email: mauritz@multidata.net.id
Quote:
http://202.72.194.21/card.exe



CastleCops -> MIRT Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group