http://{BLOCKED}mmj.com/cfg.bin
Publish date: 10 de septiembre de 2013
Fecha/hora de bloqueo de la URL mi¨¦rcoles, 4 de septiembre de 2013 11:01:00 GMT-8
Clasificaci¨®n: : High
Dominio : ocsxxxmmj.com
&²Ô²ú²õ±è;°ä²¹³Ù±ð²µ´Ç°ù¨ª²¹: Disease Vector
&²Ô²ú²õ±è;¶Ù±ð²õ³¦°ù¾±±è³¦¾±¨®²Ô:
TSPY_ZBOT.THX connects to this URL to download its configuration file. This is the live casino online detection for KINS Trojan, dubbed as the next ZeuS by media reports. Similar to ZeuS/ZBOT, it downloads configuration file and steals online banking credentials. However, it uses a different packer and has anti-debugging and anti-analysis routines.