http://{BLOCKED}.10.239

 Analysis by: Gideon Hernandez

 URL BLOCKING DATE/TIME: 15 May 2013 03:00:00 PM GMT-8
 RATING: HIGH
 DOMAIN: 108.62.10.239
 CATEGORY: Disease Vector
 DESCRIPTION:

BKDR_TENGO.A connects to this website to send and receive information. It uses the legitimate analysis tool Aheadlib to pass itself off as a legitimate system DLL file.

Related Malware