W32.Spacefam(malware hosted in Latvia Users)

Remote Host Port Number
46.252.131.8 80

The data identified by the following URLs was then requested from the remote web server:
http://ddk100.com/v3/setup.php?act=fb_get
http://ddk100.com/v3/setup.php?act=fb_start&id=Se7bwTG6pzBi2DpYW5Sw8vtv

exe file:
http://49005903.tinylinks.co

infos about hosting:
http://whois.domaintools.com/46.252.131.8

Categories: Uncategorized