http://{BLOCKED}ev.ru/newbos3.exe

May 06, 2013

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Jerowin Santillan

---

 URL BLOCKING DATE/TIME: 20 Mar 2013 02:35:00 AM GMT-8

 RATING: HIGH

 DOMAIN: yddivvev.ru

 CATEGORY: Disease Vector

 DESCRIPTION:

WORM_KELIHOS.NB can be downloaded from this site. This worm used spammed messages about the Boston Marathon bombings to infect computers.

Related URLs

• http://{BLOCKED}.129.232/default.htm
• http://{BLOCKED}0.92.191/home.htm
• http://{BLOCKED}.159.155/login.htm
• http://{BLOCKED}156.173/install.htm
• http://{BLOCKED}.13.10/main.htm
• [More]

Related Malware

• WORM_KELIHOS.NB