[2018-10-10] UnderminerEK

October 10, 2018

Overview

Saz file is 2018-10-10_20-45-46.saz

(↓Analysis result using EKFiddle)

Traffic-Chain

https[:]//adpop.live/BxaKp
↓
http[:]//45.56.89.246/up.php
↓
http[:]//45.56.89.246/10.php
↓
[Underminer Exploit Kit]
http[:]//184.170.216.48:8080/index.php?ad_id=20181101&req=72585&rot=k383OP&id=8080&zone=x0343&prod=5261&lp=Type&st=y5Yinls940lh3dErwDKSDA&e=1539172192&y=203359364131