Looks like the new trend in the downloaders world is country-targeted software. One of the recent downloaders that we received offered specific executables depending on its location: USA, Canada, United Kingdom, other European countries, and all other countries.
This one first checks remote servers, using IPGEO, to see to which country that host belongs. If you reach that site, it will print the country code for you, for example:
US|US
The downloader reads that message and if it identifies the United States, it will download:
bass.exe
If it is CA (Canada),
trout.exe
UK (United Kingdom)
pike.exe
EURO (Europe)
fluke.exe
OTHER (All other countries)
dolphi.exe
Yes, we now have downloaders using IP Geolocation.
