[MIRT#9714] Backdoor on usanews7.share73.com AS12324

CastleCops -> MIRT Reports

Author: tetak PostPosted: Wed Apr 09, 2008 6:22 pm    Post subject: [MIRT#9714] Backdoor on usanews7.share73.com AS12324

Malware Alert
 
 Full Report: CastleCops Link/Backdoor_malware9714.html
 
 Changed status to confirmed malware.IP Converted: 212.182.0.53

dword = 3568697397
hex1 = 0xd4b60035
hex2 = 0xd4.0xb6.0x0.0x35
oct = 0324.0266.00.065
news_report-pdf_content.exe at this location is malware known as Backdoor:Win32/Agent.ACG (Microsoft).View CIDR AS12324 Report: http://www.cidr-report.org/cgi-bin/as-report?as=12324

"12324 | PL | ripencc | 1999-03-12 | LUBMAN-EDU-AS Poland, Lublin"<br />
Extended information for AS12324:
State/Province:
Country: pl
Responsible Domain: admins.man.lublin.pl
Abuse Email: postmaster@admins.man.lublin.pl
Quote:
http://usanews7.share73.com/news_report-pdf_content.exe



CastleCops -> MIRT Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group