http://{blocked}ru/2a.bin

 Analysis by: Sheiree Salvago

 URL BLOCKING DATE/TIME: 02 Aug 2010 05:40:00 AM GMT-8
 RATING: HIGH
 DOMAIN: ghyas.ru/
 CATEGORY: Disease Vector
 DESCRIPTION:

This is the site where TSPY_ZBOT.ISA downloads its configuration file.

Related Malware