l2u.biz(trojan downloader hosted in Germany Berlin Keyweb Ag Ip Network)

l2u.biz 87.118.99.89

Outgoing connection to remote server: l2u.biz TCP port 80

– HTTP Conversations:

F87.118.99.89:80 – [l2u.biz]
Request: GET /epilog/upd/opt.xml

opt.xml:
http://l2u.biz/epilog/upd/opt.xml
http://l2u.biz/epilog/main.php
http://l2u.biz/epilog/upd/patch.xml
http://l2u.biz/epilog/upd/filenew.exe

infos about hosting:
http://whois.domaintools.com/87.118.99.89

Categories: Uncategorized