06
Jul
10

new rogue domain: oksave9.co.cc

Whois record for oksave9.co.cc

Registrant Contact:
Name: Jong Sung, Kim
Address: 864-2, Janghangdong, Ilsan
City: Goyang, Gyeonggi-do
Country: South Korea

packupdate107_195.exe
Result: 7/41 (17.07%)
MD5: 08a2ad37c6920b640615d7a1d6c3bbec
VirusTotal
Anubis Report
ThreatExpert Report

Rogueware Page: hxxp://www1.oksave9.co.cc
Result: 2/17 (12 %)
Domain Hash: 9b83d635ed7bf5be568e9cbae3b97935
URLVoid
Note: this rogueware page triggers a “scan” of your computer if redirected by a search engine.

This rogue is called Security Master AV.

Screenshot examples:

Security Master AV fake notification
Security Master AV fake notification

Security Master AV fake scan page
Security Master AV fake scan page

When executing the file ( packupdate107_195.exe ):
Security Master AV Setup
Security Master AV Setup


0 Responses to “new rogue domain: oksave9.co.cc”


  1. No Comments

Leave a Reply

You must login to post a comment.




SANDBOX

SANDBOX ANALYSIS PAGE




 

July 2010
M T W T F S S
« Jun   Aug »
 1234
567891011
12131415161718
19202122232425
262728293031