Ponmocup not dead

Ponmocup not dead(?)

Callbacks found on an infected machine, looks like Ponmocup:

http://13.194.42.169/images2/BD3506FB4B0CADF111E70696D198B8E746C30EE4084079613CFD43EEC88122609EE165967D1E7222917877524C5C291E2E614F7B30E37C566A00017E25DE13FFEDBAD20009FBF8EFD03CAEE6F6E90B5E283D4C10238588F1893FBB644A4BE10E26625B055D1A380E1DBB92252933FBBD46B6E24D52385A781B9608EEB41516456740EEAF10BB26CE0917BF72E86E20BE67BF2AFD1ADEAFF6FA76EA22D2247A35C01D342B5598DCE6A2A34AFE7FC8A326E6980CA0FBBB0B83318C28E1F0EE2616EAD757CB3821905C21FB40E181C3ED89D533570CDE38EA1B1E8C2B27C7DC30471A53EF6BA26FC0D6F7EEBB738EA2713DCEE87F2746F9B0EE66AEE7E32BF9D5964DD8107D95D41A4A818CE0204C77EEB157798FB1AA381130885231C4F2EF3DA54F18499D3FC94A51CA71B30B5ED561EB978A84AD692BF82ADF843BFE79073E3BFC547CC41F37BA0C040FD1A70CF82B1D4A5314AC3226ADBF9CA017C8B6D4FB5013265A67440A7B07669C49F4EA44A53AEDBBD6E2712EBD6EE44218AED28CB4E87B866D2F955C6EECC10D6D0AB1B1F79B3D71B8AF8FA1B92249158B8294420F33DEFE381AE26675679224580E1F9340E65652D181AAF3ECB4A6E1443E974D5DCBDC4038FD861C753D017518EF2B54D807B396A3014363.swf


http://47.177.195.91/images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swf


http://172.182.66.47/images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swf

#END