Credits to anonymous guy from here for the sample
this is another hf http bot
Login:176.62.0.9
He’s ddosing someone allready look here:176.62.0.9/cmds.php $CMD:flood 91.207.5.190 3389 120 15
hosting infos:
http://whois.domaintools.com/176.62.0.9
Categories:
Uncategorized
Anonymous - March 26, 2013 at 4:48 am
This user seems to have some kid of rat with rootkit. Mind posting exe if you find, site is hxxp://www.ultrabot.info/
Pig - March 26, 2013 at 4:31 pm
thank you for the submition 🙂
Pig - March 26, 2013 at 7:10 pm
this is the decompiled .class file from the .jar
http://pastebin.com/S6V3fZcs
Anonymous - March 30, 2013 at 2:33 pm
Oh my GOSH! Croatia is my country… Should I report this?