http://{BLOCKED}.241.239/css.htm

July 13, 2012

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Paul Jayson Tiu

---

 URL BLOCKING DATE/TIME: 10 Jun 2012 02:40:00 PM GMT-8

 RATING: HIGH

 DOMAIN: 113.10.241.239

 CATEGORY: Disease Vector

 DESCRIPTION: JS_DLOADER.SMGA may be downloaded from this site. JS_DLOADER.SMGA exploits a CVE-2012-1875 vulnerability in Internet Explorer.

Related URLs

• http://{BLOCKED}.241.239/javaw.exe
• http://{BLOCKED}9.236.143/english/cala.exe

Related Vulnerability

• (MS12-037) Cumulative Security Update for Internet Explorer (2699988)
• June 2012 - Microsoft Releases 7 Security Advisories

Related Malware

• JS_DLOADER.SMGA
• TROJ_AGENT.BCSH
• BKDR_AGENT.BCSG