http://{BLOCKED}1.52.68/search.htm

May 06, 2013

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Jerowin Santillan

---

 URL BLOCKING DATE/TIME: 05 May 2013 02:30:00 AM GMT-8

 RATING: HIGH

 DOMAIN: 213.231.52.68

 CATEGORY: Disease Vector

 DESCRIPTION:

WORM_KELIHOS.NB connects to the following websites to send and receive information. This worm used spammed messages about the Boston Marathon bombings to infect computers.

Related URLs

• http://{BLOCKED}.129.232/default.htm
• http://{BLOCKED}0.92.191/home.htm
• http://{BLOCKED}.159.155/login.htm
• http://{BLOCKED}156.173/install.htm
• http://{BLOCKED}.13.10/main.htm
• [More]

Related Malware

• WORM_KELIHOS.NB