» a.sungry.com
Overview
Analysis
IPs Addresses (1)
Downloads (6)
Network (111)
Related Domains (34)

a.sungry.com

Whois Privacy Corp.

Domain Information

The domain a.sungry.com registered by Whois Privacy Corp. was initially registered in February of 2015 through TLD REGISTRAR SOLUTIONS LTD. Currently this domain has been known to host various forms of malware. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.

Registrant:

Whois Privacy Corp.

Registrar:

TLD REGISTRAR SOLUTIONS LTD

Server location:

Arizona, United States (US)

Create date:

Monday, February 23, 2015

Expires date:

Tuesday, February 23, 2016

Updated date:

Monday, April 4, 2016

ASN:

AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Root domain:

Whois:

1 sungry.com record

Scanner detections:

Malware distribution (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Optional.PCUtilities (M), Threat.Win.Reputation.IMP

100.00%

The domain a.sungry.com has been seen to resolve to the following IP address.

ip-184-168-221-96.ip.secureserver.net

July 10, 2016

File downloads found at URLs served by a.sungry.com.

1 / 68 (Malware)

http://a.sungry.com/hp/?q=7Ss1LkCMM9v7Jomjlh5pifZPjD0gOfAcs346p6BOTnWE M mZtbMBMTMBo1OB4tvu9dJNyFPU58uLE2r50vjPSOqXqrdZO74dhZxFBsA28Av8Nt195cLx7TS3b0XU8UwxtdP0fDO3VQDrhNT7k9idrJWZsgWj5FN1J9F/y/K9Jzs37862pgSar88lsT1KalnpFK7wYr8UBZlgPD02ZI6fTgx/.../bQme14oTk0 E4chIpVoskHsakXJmltc8o2ZwWmQ7Bc&external_id=1435217835389172630 (dispicable me 2 full.exe)

1 / 68 (Malware)

http://a.sungry.com/hp/.../ZoWNDna20FEfktNVPp9aF LNPj3JwsZmQlBvrzVmCJghV3xySmPDri PvfCRdS1q4ow0n pIc7eeDfY5oHr6VZseTvGT66KhtejprJ4MfKXMOT9p8U3agJwlDl3Bl8FS4wzlgvhr2JSc4RqpKLMmYAKndg2pMdB nF50YjatJIBkIeIKnNizXsnQtOazb hMSd2JI8q7sgTJccXgP8eji 7YkVo2Yc1FrIpuQmCPnx5llrjBqN5tSYCRRktSulIi3rpIzAt2xddcZFu1JVnhyJSQNRmxFnrDULMmEeBvXx3oOA5fv8XA9HocVWzzW9mX8&external_id=1435219835726906282 (adobe pagemaker 7.exe)

1 / 68 (Malware)

http://a.sungry.com/hp/?q=yA7P2qqm7xs9SUMOQIyy/ neujPAoByX04xGKIkT8TffX4rVGflAtbSfzqyEyXHrKIaRy8NowsVTDDlRdKiZdmsiaIn4jJ7YEzrVEz2vGyv5bRJPxmF0EmZPYj/QksNPhSsaSNxl6evM/NGQMX/x9YHR5Pjr/T3W 3hVN7Uw8N/v9AxYxQvoyrv3RowC21ObtnUEQ8OoziEzspbZEgSBEurc CaPzEchPOuOEkUVYKzoFQvua KlIcGPyfyS8InwUi0U2RVlj0SvSBUI3Eb3YXunteKGmWQWSMWhu5HA94mFQwU0qzmO4lUhkjv1ihiKSSaxSDGOv2jKZx9/Fjgm5bvOMocqv2rL9s7Yur15ThFNKVfbKxXmtJr4uTKWKtuiVCiaMWiuS09i2fpsnlV3cPoZLAL0YvfgfIP73oHs2yZWoNQx8bLa8WndO4m nzd37Sf/9ibzgOxX gnvKmz aR6tyuY7HCcvtUfpcVZ51rOJcEUVGtGqtrc56GEd7CxSFxKJB3ZVFjuuJ6531uYj9qXy86N32LW2E4Gt5I YOV/Sry6Ilndj269dituAJs0E4Bjj7SlCU1BDIiLMhoSr76hf9t0AiucT4zk/wcjr9i2leWQomtTaf0hvCQ1kwgkDOpIoxE49sNKULstJ/gwX6tDjdWFjaPhPpzHRENK/TazveTw9AARUYAKTc7UxcmVjXWsuxM/1IoPoO/tzwIsctBoV4odJ3kC4SA3eTC26PUnLllmZhtai93jOKAw NZYkCOLNS4QJVxPTwOsx2sh6d/wmnzT9KBHRLM5 4Bs5aTwCY2PGsgLKBWPujmsNaqUcDbaH6xCYx51GeNX2/ZOq7o1npdibAfDRww8je9FhOq8mEuFNaGLxapH/JaG/.../wDiVPPqIWJjUz8FOEgCyGQMUMIhtISe9uG8mYH21TyW3 eP (download.exe)

1 / 68 (Malware)

http://a.sungry.com/hp/?q=aNXF6Wo28y5Clhabcd93IS953YDFKZoeYLRKd0g0lUelnIfV8nR2IaLeV7GDUo OiexDqJf/Cv4IUzI48eBxYCZakvRAtTq0NntWmhRXpsmsSUJ5PMOD6kTuwocZjkWflIJasoutV7wn6wl/QSvp71muShYpVFN8XYOEeKNiJ3vzaDfMpneu9DuNTS7SqJsByPrJdaTp9pG apFsHjeUdahyqQhulJraQm0xK3euo6y3/8jxtGFH0Y27BCzH6hdj8x9fq1MfRhRCUA4CxySz969FVfhfej8RjG4yyK1DEtSIbc/RLwWhEKUzRSsqtJ64POgLyTHeteJWZt0pE19dDSNmUA40pZDBVEdnUNvh7FvefiKlHM2bqj12/.../3gVKjGzGnwH5xz7VCyQRLE2K zszKkdsH4wp 3ZCIZpkzwZMmHJWHzd8pwLkeJ&external_id=1435222679514914598 (somnotte prima degli esami - oggidvdrip-xvid-ita-mp3.exe)

1 / 68 (Malware)

http://a.sungry.com/hp/?q=gwKoj7SQmNyY6pnikgevmtajjOdIeVdeeqB0gkTAZ6 8VortvuQrQgVb1TZ rnOSbkDgLQoAPjCEhOAZguKdNyFi6U9ZYnpssag3cW79tVic9trg8Frr5hkTnvcXOKRv7bkmysW8GIajXdylkyvzX8NfPrNq3PnHvoj/TDhK1PfaDQxIgNkxNnnhV6ApXBeLB2voqCbh/GzZ5E2yfobfc4KUY4JFdGvq0g8ntXBL7cnjOWtucgR3NlFTkzlfzSZUB23gMOIhx8Pabxvg5kfqPDcVGGDeEEarObf0mnqD4FXp iEJMaFKAp 08L/.../6 ES273ledLJ m2as HCPvWK2W2VC2b7u2Odhu9dvbV5uWicb6iUcdgn5tbo0woL71N1yVybu4sFj6LCg08s05G1QhqY6pwC&external_id=1435223066704931535 (notte.prima.degli.esami.oggi.2007.italian.ts.md.xvid-loud.exe)

1 / 68 (PUP)

http://a.sungry.com/hp/?q=APIqm3i2 gKX7ikg01A 0wL2oEcOoBWldBoWKIF1RU/bX5RHSAqAggfftmyEtiu2LvaVWgiYxuVT0kMRbliwnUrTkvodRD7SdzPF59uSJ6wmKkvovJM31E5que/dKPvS/jeG3EqVOp hBeAjZVXKwus8cxlq/G0TgiC9vCpJVg2oYGKpCnO2xKJitjRdBp7ie6n4jTrpZhn13jTGnyBgAqlI6VEU6eYb03BdSH42p6WplWYHRKhzWEx/ nn9 NWC7CTKUzAaIa82o067nsDJYPD3cB9Z4Olq2yhCiBv/MD U1zApOuf5MNWvfivrY6kWGUuSnLiREBZuYOBzziQByAhzmB/.../9nO6zL&external_id=1435224600404737267 (download.exe)

The following 111 files have been seen to comunicate with a.sungry.com in live environments.

TCP » 184.168.221.96:80

TCP » 184.168.221.96:80

TCP » 184.168.221.96:80

TCP » 184.168.221.96:80

crossbrowse.exe (Crossbrowse)

TCP » 184.168.221.96:80

b9eg190.exe (Running tester)

TCP » 184.168.221.96:80

ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 184.168.221.96:80

UCBrowser.exe (by UCWeb)

TCP » 184.168.221.96:443

online-guardian-v2.0.9.exe

TCP » 184.168.221.96:80

viewpassword155.exe

TCP » 184.168.221.96:80

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 184.168.221.96:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.168.221.96:80

crossbrowse.exe (Crossbrowse)

TCP » 184.168.221.96:80

online-guardian-v2.0.9.exe

TCP » 184.168.221.96:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.221.96:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 184.168.221.96:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.221.96:4199

clientaudiomgnse.exe (Rewards fours by Monoliths mixes)

TCP » 184.168.221.96:80

kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 184.168.221.96:80

veribrowserr170.exe

TCP » 184.168.221.96:80

UCBrowser.exe (by UCWeb)

Latest 20 of 120 files

Related Domains

1clickdownloader.com

begin-download.com

devopenrack.com

downloadcobol.com

ftdownloads.com

getspacecloud.com

makemybrowser.com

smashingsports.co

subs4movies.com

30 of 34 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.