http://{BLOCKED}ncessurplus.com/topic/accidentally-results-stay.php?aZwosKokEzNu...

July 29, 2013
 Analysis by: Kenneth Guang Zheng Lee
 URL BLOCKING DATE/TIME: 24 Jul 2013 06:05:00 AM GMT-8
 RATING: HIGH
 DOMAIN: fragrancessurplus.com/
 CATEGORY: Disease Vector
 DESCRIPTION:

JS_OBFUSC.BEB loads a JAR file from this URL and it passes parameters to it if the computer has a particular Java version installed. This malware is related to a spammed message that leverages the news on the royal baby, Prince George.

Related Malware