http://{blocked}.0.112/adm32dl l_sync.bin

 Analysis by: Sheiree Salvago

 URL BLOCKING DATE/TIME: 03 Sep 2010 12:35:00 PM GMT-8
 RATING: HIGH
 DOMAIN: 91.194.0.112/
 CATEGORY: Disease Vector
 DESCRIPTION: TSPY_ZBOT.CDM connects to this URL to download its configuration file.

Related Malware