http://{BLOCKED}0.124.120

 Analysis by: Kierson Vigilla

 URL BLOCKING DATE/TIME: 31 May 2013 04:20:00 PM GMT-8
 RATING: HIGH
 DOMAIN: 188.190.124.120
 CATEGORY: Disease Vector
 DESCRIPTION:

ELF_MANUST.A connects to this Internet Relay Chat (IRC) server where it can receive and perform commands from remote malicious attackers, as well as make the affected system part of its botnet. This is involved in an exploit attack targeting a critical vulnerability of Ruby on Rails.

Related Malware