[ikolor]

thanks buddy
https://www.virustotal.com/en/file/23d3 ... 493906117/

majcc.pdns.cz

[Antelox]

thanks buddy
https://www.virustotal.com/en/file/23d3 ... 493906117/

majcc.pdns.cz

This is vjw0rm.

C2:

http://majcc.pdns.cz:1512/Vre

Request sent with the following UA:

User-Agent: PLAY3_24C2B6A0\XT3X8xZjeP\16GxC1L\Microsoft Windows 7 Home Premium \undefined\\YES\TRUE\

BR,

Antelox

[ikolor]

this is not may file .Only from someone .

https://www.virustotal.com/en/file/342a ... /analysis/

[Antelox]

this is not may file .Only from someone .

https://www.virustotal.com/en/file/342a ... /analysis/

vjw0rm

Code: Select all

hxxp://lipiec.ftpserver.biz:1742/Vre

BR,

Antelox