chatme.redirectme.net(irc botnet hosted in Romania Voxility S.r.l.)

By Pig, June 23, 2012

Resolved : [chatme.redirectme.net] To [109.163.229.26]

Remote Host Port Number
109.163.229.26 5555

Clients: I have 54 clients and 0 servers
Local users: Current Local Users: 54 Max: 176
Global users: Current Global Users: 54 Max: 82

NICK New{US-XP-x86}6447253
USER 6447253 “” “6447253” :6447253
MODE New{US-XP-x86}6447253 +iMm
JOIN #infected private
PONG :7E4C6516

hosting infos:
http://whois.domaintools.com/109.163.229.26

Categories: Uncategorized

3 Comments

Anonymous - June 24, 2012 at 7:10 pm

http://stealth-files.co.cc/savefiles/epme.exe
http://stealth-files.co.cc/savefiles/125.exe
http://stealth-files.co.cc/savefiles/tets.exe
Here are some files I picked up while sitting in a IRC channel, Have fun pig. These guys seem to be some real Hf Haxzors

Pig - June 24, 2012 at 10:06 pm

thank your for samples 🙂 will check them later

Pig - June 24, 2012 at 10:31 pm

domains from 125.exe :oompaloompa.su
oompaloompa.suoompaloompa.su
windowsupdate.microsoft.com/
oompaloompa.su
windowsupdate.microsoft.com
/syst/index.php

Comments are closed