» a.skyall2get.ru
Overview
Analysis
IPs Addresses (1)
Downloads (4)
Website Detail
Related Domains (20)

a.skyall2get.ru

Private Person (Proxy Registrant)

Domain Information

The domain a.skyall2get.ru is registered by proxy through REGTIME-RU and was originally registered in May of 2015. Currently this domain has been known to host various forms of malware. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.

Registrant:

Private Person

Registrar:

REGTIME-RU

Server location:

Moscow City, Russia (RU)

Create date:

Wednesday, May 13, 2015

Expires date:

Friday, May 13, 2016

ASN:

AS25532 MASTERHOST-AS LLC _MASTERHOST_, RU

Root domain:

skyall2get.ru

Whois:

1 skyall2get.ru record

Scanner detections:

Malware distribution (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Optional.PCUtilities (M), Threat.Win.Reputation.IMP

75.00%

VIPRE Antivirus

Threat.5180739

25.00%

avast!

Win32:FakeDownload-G [PUP]

25.00%

Dr.Web

Trojan.PWS.Qqpass.11207

25.00%

Kaspersky

not-a-virus:AdWare.Win32.Multiplug

25.00%

Emsisoft Anti-Malware

Gen:Variant.Adware.Kazy.659485

25.00%

The domain a.skyall2get.ru has been seen to resolve to the following IP address.

83.222.14.207

May 18, 2016

File downloads found at URLs served by a.skyall2get.ru.

1 / 68 (Malware)

http://a.skyall2get.ru/hp/?q=w7aDY0QwTT3nUMOQIKsajUk8hpWQYBVrbfxpqbxjTS2qU8qMSNR/aIDAnE7 7/.../X4SmqIYY7wLx3xw0DBrjsjEpN2hU3FaFdp6ewH1Tcqj8tQz39rkBeu2M54lTGRTtqvF (download.exe)

5 / 68 (PUP)

http://a.skyall2get.ru/hp/?q=JhLnkWqkkR2F6nikg0fEfUcf8kY8itoe74ppd6fe5/EwKBMMJ8IY M4ttY5A0FsmRXO7RGkLx aPCJVZ5OBAjOvvSblWK4frbV4 WHHJUFBVeBQBez8wo4EPyOv/Aq9l6/.../qMkY1Uncv0 pJ5sRqX7Pjg7xWkdWK0wfXuXi3Hh6vTyIxYZTaJDGdy7XVP8XaWaQgEjiTdn54PDGdBgxK8dknsPzDpOIH102mL5c (hss-3.37-install-hss.exe)

1 / 68 (Malware)

http://a.skyall2get.ru/hp/?q=D9Iqm4adKfUGvKEG xn92PIgGKacO0EOoONYnToPbI/.../KCu4QQZ9sjZ0T7QsRvjRC1cLu2sNLhJducxBEPcmmuNyplYVWtzq4DRinjX8cYzA (download.exe)

1 / 68 (PUP)

http://a.skyall2get.ru/hp/?q=Dpn5yMWYIy b9tvqom2S13xu08WNLAwJT1cqW2qw6C2aWB/kfMv64ClcrygEPSTWcBaIsrLkyv6TA53p7viyelocgYodOLRnBOPFdBLgo7n5QIfTkqHyO5nYPcGEYB1KXhZc9g6IjP ALdk1eIrDzHuUyvhe jWH 8EcU8UWFjg i8zFL6Lg5PHHFRt74AmmOpVofW7Je erXH9Nj Fe2y9ycZuTzz5lLQ/oQLsecDXApOvvwt/hxlR5X3NWHKu2duxE1SPgY9R6h9 1YR4QMkjqhQ83qGX xmcEPat/XsjKftMRxyesyQygJPmnA JdKPOMt3geN467lv0NtpK04Pb65Ed85rBE7 YJPZ2xvgPjHVqhAqOdNYKoltFZzSoHONKPwGnzrhwZxIL8UlibL 8JouLwYL0oGHxTzkhARspBUnOulMQKVNGRd1oh3c16WFj3lCXqAarrJMKtYXZ eI3uP1j1FVAzcY8r8G9kmUtYoYmy05kPOkzX6zBisCTKM6m2RNeY8b9BvarN/e0hItORxsfIgkB2uWaHpQjYEdbQwNJj8RHnob4O6TpWZQr5IJB1LyvTRAx51koIMbd93Mi3zvanTW 7X5t1Jof0HcZj4gKf0c5Lc7LdUxRmKxPsyiIzp0KlonZWBk1aK6sIZxwanI2h5UtJtg0yau3e8AdqOcPkrZxsvgS4ESR76tGUIkiBZfcQw2Ywm4IwElK1zMqt8GSjLhlfGY5dUnjDYhgX5s9j/.../VdaBC8C3fPS6jtasmuqYJl9ehk3M yaW4z8t9esa5zj0 DqGiME6e1fc3o2 QsCuF9R44EzGHaydZ (download.exe)

URL:

http://a.skyall2get.ru/

Web server:

Apache/2.2.22 (Debian)

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.