The lamer using this banking trojan is a stupid albanian from fieri 1.20 from earth hands up also famous member in lamers paradise opensc.ws
crackseller.zapto.org
Opened listening TCP connection on port: 30362
Dns resolved crackseller.zapto.org to 91.211.116.149
link used to infect:
http://kubann3zi.tk/zs/bot.exe
Dns resolved kubann3zi.tk to 91.211.116.149
infos about hosting:
http://whois.domaintools.com/91.211.116.149