http://{BLOCKED}5.com/uploads/fb9c6013f1b269b74c8cd139471b96fc/feng.jpg

April 14, 2013

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Jerowin Santillan

---

 URL BLOCKING DATE/TIME: 21 Mar 2013 06:15:00 AM GMT-8

 RATING: HIGH

 DOMAIN: 6885.com

 CATEGORY: Disease Vector

 DESCRIPTION:

TROJ_DLDR.HB connects to this URL to download a file and saves it as %System%\hzcompl.dll. This malware is involved in the cyber attacks that targeted specific users in South Korea during March of 2013.

Related URLs

• http://{BLOCKED}oxylists.net/img/google.bmp
• http://mailimg.{BLOCKED}e.com/mail/img/button/btn_mycomputer.gif
• http://{BLOCKED}a.com/public/home_new/images/s/baidu.gif
• http://mail2.{BLOCKED}m.net/hanmailex-static/alarm/Notifier.swf
• http://{BLOCKED}lower.net/board/images/start_car.gif
• [More]

Related Malware

• WORM_STTKR.B