NEW MALWARE CODE: Trojan.NSIS.StartPage.ed (CHINA) MALICIOUS DOWNLOADS Domain: keaitz.com

MALICIOUS SITE: (Nullsoft Scriptable Install System FROM: CHINA)


DOMAIN:

keaitz.com

• https://www.virustotal.com/de/url/9b81a505362c1aab403292563a9360f72e8e076fd83794ef36faeb29181ebdf2/analysis/1391274035/

1390472709.keaitz.com

• https://www.virustotal.com/de/url/d3940fe84e654ea2d17c7d219ae53ca86be9b66d1474683ae0596ed5c8d57f8c/analysis/1391272982/

• https://www.virustotal.com/de/file/a77b681a6138fdcc50c8be703ee1637fc60f1f90a47f6ba09b1539371ac6f60e/analysis/1391272594/

SPECIFIC LINK:

1390472709.keaitz.com/chat/raffle/raffl.exe

• https://www.virustotal.com/de/url/510a6e03aa6c4b786a33d25f7d48d2b0c76d16726e2efa83b531137b09fb5651/analysis/1391272314/

INFECTED WITH: Trojan.NSIS.StartPage.ed

• https://www.virustotal.com/de/file/cb99213503ed1f23bdcca1ef9b95ac1b423036dba3e5f8bbd68743b7dcdb98fe/analysis/

SEE ALSO:

• http://app.webinspector.com/public/reports/19839594

• http://zulu.zscaler.com/submission/show/b57c16e6dd5a128c923b1b0555949636-1391272426

• http://anubis.iseclab.org/?action=result&task_id=1f72b554221efb114f53fcb4a82d166f0&format=html

• http://www.urlvoid.com/scan/1390472709.keaitz.com/

SCREENSHOT OF DOMAIN (403)

FOR MORE INFO ON THIS THREAT, SEE:

• http://www.avgthreatlabs.com/virus-and-malware-information/info/downloader-nsis/