Smoke Loader botnet controller @45.132.17.131

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.

Smoke Loader botnet controller located at 45.132.17.131 on port 80 (using HTTP POST):
hXXp://afrocalite.ga/

afrocalite.ga. 600 IN A 45.132.17.131

Referencing malware binaries (MD5 hash):
3d75271eb12cedd6440f8ed22724840c — AV detection: 22 / 69 (31.88)
a60fb5ddab79eb3c2365a5fa15290933 — AV detection: 20 / 68 (29.41)
b63749643d0f1372ca081e9cc42c6225 — AV detection: 56 / 67 (83.58)
eefd6e1c185e49b48591f061e17ef3e1 — AV detection: 35 / 67 (52.24)
f4acf3df4751fb02780274e8c53117a8 — AV detection: 26 / 67 (38.81)

Опубликовано
В рубрике ruvds.com

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *