#DhiaLite- Malware domains Aug 30h, 2013

Thu, Aug 30th 2013
#DhiaLite - Suspicious domains spotted today hosted on same IP 103.31.186.29 in http://urlquery.net/report.php?id=4858199

xxxnuvidplm.dnset.com
xxxnuvidcgs.dnset.com
xxxnuvidnyf.dnset.com
xxxnuvidjyn.ddns.name
xxxnuvidgvx.dnset.com
xxxnuvidswr.dnset.com
xxxnuvidcoe.ddns.name
xxxnuvidlkq.ddns.name
xxxnuviddnb.dnset.com
xxxnuvidcga.ddns.name
xxxnuvidydv.ddns.name
xxxnuvidrkt.dnset.com
xxxnuvidrrk.dnset.com

Live payloads
http://xxxnuvidcgs.dnset.com/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidplm.dnset.com/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidcgs.dnset.com/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidnyf.dnset.com/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidjyn.ddns.name/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidgvx.dnset.com/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidswr.dnset.com/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidcoe.ddns.name/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidlkq.ddns.name/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuviddnb.dnset.com/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidcga.ddns.name/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidydv.ddns.name/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidrkt.dnset.com/2013/hardcore-animal-sex-video.avi.exe
http://xxxnuvidrrk.dnset.com/2013/hardcore-animal-sex-video.avi.exe

Example VT report
https://www.virustotal.com/en/file/14d3c3bb5f11527054297bae3e19b8af90676f3b913f09d4fa2423f67efcf1a4/analysis/1377887443/