http://{BLOCKED}0.124.120

June 02, 2013

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Kierson Vigilla

---

 URL BLOCKING DATE/TIME: 31 May 2013 04:20:00 PM GMT-8

 RATING: HIGH

 DOMAIN: 188.190.124.120

 CATEGORY: Disease Vector

 DESCRIPTION:

ELF_MANUST.A connects to this Internet Relay Chat (IRC) server where it can receive and perform commands from remote malicious attackers, as well as make the affected system part of its botnet. This is involved in an exploit attack targeting a critical vulnerability of Ruby on Rails.

Related Malware

• ELF_MANUST.A