[nsp-sec] Malware issue at AS45753: someone could ping me offlist

[jose nazario]

On Mar 4, 2010, at 8:34 AM, Carles Fragoso wrote:

> I am investigating a malware issue based on 112.121.181.42.


in case you need background on this:

i have a sample that came in from hxxp://nt11.co.in/21

MD5: b8653d4898eb170e4abc7e1051d891f9
SHA1: 65aa3c46c749e4fa591aa79896e3d58e8a4b1f5d
File type: application/x-ms-dos-executable
File size: 48128 bytes

poorly detected:

http://www.virustotal.com/analisis/ 
172edfd940c3d058241fcef33a94d3c16082174797cab9bc4f02c9d34025e80b-1267180 
481

_____________________________
jose nazario, ph.d. jose at arbor.net
manager of security research, arbor networks
http://asert.arbor.net/