http://{BLOCKED}133.133/boston.avi_______.exe

May 06, 2013

• Email
• Facebook
• Twitter
• Google+
• Linkedin

 Analysis by: Jerowin Santillan

---

 URL BLOCKING DATE/TIME: 17 Apr 2013 10:30:00 AM GMT-8

 RATING: HIGH

 DOMAIN: 78.90.133.133

 CATEGORY: Disease Vector

 DESCRIPTION:

WORM_KELIHOS.NB can be downloaded from this site. This worm used spammed messages about the Boston Marathon bombings to infect computers.

Related URLs

• http://{BLOCKED}.129.232/default.htm
• http://{BLOCKED}0.92.191/home.htm
• http://{BLOCKED}.159.155/login.htm
• http://{BLOCKED}156.173/install.htm
• http://{BLOCKED}.13.10/main.htm
• [More]

Related Malware

• WORM_KELIHOS.NB