http://{BLOCKED}49.130/boston.avi_______.exe

May 06, 2013

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Jerowin Santillan

---

 URL BLOCKING DATE/TIME: 17 Apr 2013 11:30:00 AM GMT-8

 RATING: HIGH

 DOMAIN: 94.28.49.130

 CATEGORY: Disease Vector

 DESCRIPTION:

WORM_KELIHOS.NB can be downloaded from this site. This worm used spammed messages about the Boston Marathon bombings to infect computers.

Related URLs

• http://{BLOCKED}.129.232/default.htm
• http://{BLOCKED}0.92.191/home.htm
• http://{BLOCKED}.159.155/login.htm
• http://{BLOCKED}156.173/install.htm
• http://{BLOCKED}.13.10/main.htm
• [More]

Related Malware

• WORM_KELIHOS.NB