<![CDATA[Latest posts for the topic "tặng ae con giun đầu tay e tóm đc "]]> /hvaonline/posts/list/28.html JForum - http://www.jforum.net tặng ae con giun đầu tay e tóm đc /hvaonline/posts/list/42004.html#261779 /hvaonline/posts/list/42004.html#261779 GMT tặng ae con giun đầu tay e tóm đc /hvaonline/posts/list/42004.html#261780 /hvaonline/posts/list/42004.html#261780 GMT tặng ae con giun đầu tay e tóm đc /hvaonline/posts/list/42004.html#261786 /hvaonline/posts/list/42004.html#261786 GMT tặng ae con giun đầu tay e tóm đc http://eureka.cyber-ta.org/OUTPUT/5b1e1534c828d398b0ae91820913911f/  (trang http://eureka.cyber-ta.org/ unpacked .exe và cho down về).
http://malwr.com/analysis/5b1e1534c828d398b0ae91820913911f/ 
http://anubis.iseclab.org/?action=result&task_id=1f63a15db72d290947595dc73387528ae&format=html 3.d) wuauclt.exe - Network Activity - HTTP Conversations: From ANUBIS:1030 to 91.139.236.32:80 - [losfakers.ru] Request: POST /and/image.php Response: 200 "OK" From ANUBIS:1032 to 89.44.198.188:80 - [losfakers.ru] Request: GET /t.exe Response: 200 "OK" From ANUBIS:1034 to 81.161.207.102:80 - [losfakers.ru] Request: POST /and/image.php Response: 200 "OK"  
Phân tích host:
91.139.236.32 Ventsislav Marinov Sakadjiyski Global Communication Net Plc. 4 Kavala Str. Haskovo Bulgaria 89.44.198.188 CRISTIAN BIRJARU ALTIS NET SRL STR. Marasesti Nr. 9-11 Rosiorii de Vede Teleorman 145100 Romania 81.161.207.102 POL KASKADA Artur Lagodzinski Jana Kilinskiego 35 Jarocin 63-200 Poland 
]]> /hvaonline/posts/list/42004.html#261810 /hvaonline/posts/list/42004.html#261810 GMT