http://{BLOCKED}mmj.com/cfg.bin
2013年9月10日
ブロック日時: 2013年9月4日 11:01:00 GMT-8
評価: 高
ドメイン名: ocsxxxmmj.com
カテゴリ: Disease Vector
概要 :
TSPY_ZBOT.THX connects to this URL to download its configuration file. This is the Trend Micro detection for KINS Trojan, dubbed as the next ZeuS by media reports. Similar to ZeuS/ZBOT, it downloads configuration file and steals online banking credentials. However, it uses a different packer and has anti-debugging and anti-analysis routines.