Category MALICIOUS DOMAIN: Singapore Site with TrojWare.JS.Agent.caa - aappb.info

MALICIOUS DOMAIN:

aappb.info

• https://www.virustotal.com/de/url/72998bae1ed716e2e8c077ff319d75308ba661afc8d19d60e00dd0621fd8fc66/analysis/1387112465/

INFECTED WITH:

• https://www.virustotal.com/de/file/4ba154b275fbe053a438e957d38a2293edcc4be0331b222ac267d542d52e1d5e/analysis/1387112372/
• https://www.virustotal.com/de/file/8a18117a9c5eef42e922a1bf8aa30e26b8c7638293ecf4442273c68a3350f573/analysis/1387112048/
• http://wepawet.iseclab.org/view.php?hash=0777f1de3375fc99568976bcaab97fa2&t=1382420593&type=js
• https://urlquery.net/report.php?id=8115969

REMOTE DESTINATION(S):

master-style.ru/js/tiny_mce/plugins/emotions/img/1/404.php

• https://www.virustotal.com/de/url/a8c975f7925a788b981bf947385a56f7b8ef6d351a3232cf9065979f322d5501/analysis/1387112992/
• http://wepawet.iseclab.org/view.php?type=js&hash=cd15c24a9c1de2dc6bc00ac1fc9e0e52&t=1374237621

adultbiz.in/new/jquery.php

• https://www.virustotal.com/de/url/b03f7789db1a34fee2476e243b74010c55223066d26b488e1ef36a9816d86458/analysis/1387113078/

www.insead.dk/wp-content/uploads/jquery-update.php

• https://www.virustotal.com/de/url/8ac7cd6ca798e247c9bc27cbf699fd13858637c19f62032003c32b391974d8af/analysis/1387113153/

imamasim.com/modules/mod_modules/jquery-update.php

• https://www.virustotal.com/de/url/2203a29def19ea11679d6b4d4e8ba6a553502c71982fbf382dead5df87f5eb38/analysis/1387113242/

www.nldburma.org

• https://www.virustotal.com/de/url/3f3b601e691be8309384f18a91babb809c197074454a0ab037be4009127c746b/analysis/1387113360/

IP:

aappb.info = 119.81.1.66 

• https://www.virustotal.com/de/url/46810efc88781a8fc86d0341e04fbdf65ef502ffca2f5445d81f422e4ea5f096/analysis/1387115588/
• https://www.virustotal.com/de/ip-address/119.81.1.66/information/

Bad Host Appearances: 14

• https://www.projecthoneypot.org/ip_119.81.1.66