» captain-force.ru
Overview
Analysis
IPs Addresses (6)
Downloads (26)
Network (2)
Website Detail

captain-force.ru

Private Person (Proxy Registrant)

Domain Information

The domain captain-force.ru is registered by proxy through REGTIME-RU and was originally registered in May of 2015. Currently this domain has been known to host various forms of malware. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Private Person

Registrar:

REGTIME-RU

Server location:

Oregon, United States (US)

Create date:

Friday, May 15, 2015

Expires date:

Sunday, May 15, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc.,US

Whois:

1 captain-force.ru record

Scanner detections:

Malware distribution (100% detected)

Scan engine

Details

Detections

Reason Heuristics

Threat.Win.Reputation.IMP

100.00%

The domain captain-force.ru has been seen to resolve to the following 6 IP addresses.

83.222.14.207

May 18, 2016

52.27.128.59

ec2-52-27-128-59.us-west-2.compute.amazonaws.com

July 2, 2015

52.27.128.56

ec2-52-27-128-56.us-west-2.compute.amazonaws.com

July 2, 2015

104.28.27.90

July 2, 2015

104.28.26.90

July 2, 2015

52.27.128.62

ec2-52-27-128-62.us-west-2.compute.amazonaws.com

July 2, 2015

File downloads found at URLs served by captain-force.ru.

1 / 68 (Malware)

http://captain-force.ru/hp/?q=t0XF6WqmVThMvBCDWYRLoWjCfSwnjERcnyYZUtqTsyR5GK d6vfoYugE460IZv5dBLAUpJmMAPNdrFJfquJXN9EVCv3cbqO9SDDjI WH/a5cS15tTlAcz6LOuJxRHXlbQJ7sVWiaOap1izSITKxZpFTugL5Gu8P 70iaMBy8J2VgPfTaN0vhjc/r/taoyNfbH5luCit1rhH6Xhj9amAAPrP8uUlAc35Lf4tbHa5cp8T5w H2o lRGQ6mJ4KUz3/78IQ5bRj1XSNwQnKOYErBY59KGkF77JByCaqExO9VBZ45TXi9Z07J2KolPB8VEo6X1JDvDiLesQTuyDYHVLpBStldoLc7SvYJ313DHgXbn8gRz0liFxPPFN 1zJ5eWoFxtalYqc3wLzDCmCQQV3ReXWc0ShGvEQ vvGbRtW7NTSe1tMoVtIu10I7SMOePtR/KkFUoLU0Q4s51jpUo8gcVgB6kVIBrQ7ZMynNm Vo24aFa07Ihr0Y0UBSjTii1IoDOa4Rua27XNUD1o1bxCXI/.../ZB&external_id=1435429681645107273 (windows 7 loader activator v2.1.9 free download.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=jJ1/ZbwodPC3923456YB2LAeVEWiQdaFxv0993 Xp3rVu 16BcJBvHVe9bEbtpGI32RnA5t/zWByelnljld DAjO4Sxgy Ww70z ZclRYZUxjkzTqYjf3wVkzNvg0LCs/.../qPjS7lPRJOoiLqhmtilG9xPrKYXodar31&external_id=1435440748024475259 (13805.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=d9tbEhOzxNXRsVNPRJzhNl8L2fkMlhtzHVsH0u62cLrbnrI nOviycMEwpuuKd2UhyGqEwDaI7y3YATWRnwlQHTDBz45YyxdYtn5f9F9oVQSJDxrxlqHzL7d7UvxHBURAG8HlJRIu/NHeKy43bfYHv1YZ0GrJXm7ZAyjgFECdRiVkc/ HSfbm27XCW/i1em/.../v&external_id=1435421977485866637 (inimey ippadithaan full movie full.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=3bOtqoh7fKmJtBCDWYRKZKARvKuco6H41nYp5RNXg12clzlPU7UJYgY/aFq7Inb2WoYuX7QQkx07xzga7LJKJlyAInp7Ia0jWIbRxmxfBkPTbxaM2XhVLu233n3xardsJR321HRmGm233nZzjvnsooGvN8IHtXCaLv155v93c/Lwf7muE/62s0XcNOHcEp2eGKjv4i7NZ0R832zWGUGeHk7uwIL2HnO5g8hPAa1CpKqWc0pnNnvNyUIvE3VMRK0lZI4sA8/HfhlM1ppAKuVqjxQZqzdiqV8dDPNGmzuUBasmPaSDEQ vnDnpIG3yTS4lhmD4BWJu0I7SNuzwDYNmVFUEq0pallKrLGx5QQA7pZJchgx4Vpc7Mi7K lWhKmJ4joxme6WXd7bywBUHv4ahR7UadQq QTPcR3qvZZf/.../kpj1I6ZwR0Nu5fx9fvR9rb21DVL4PFPgchO1PoGeg WZaNAv5EaXG4bFm40yZp lMSaLIrGmxPBts9yNrwVN&external_id=1435417702043892115 (underdog kids 2015 hdrip x264-riprg.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=Km3ZV/ub8bU5/habcd93HgELu9O9XxLN59KHM/ZQMu5rnu9iD6P47M6F4dXG/WNAklkxmK4wCS2OGdpouVJ9BHCrU3J0EUm1I4oBSalqlDhzCTxa5ahS56fcZ7ZsjvC4MBNohkISQjSpapz3KJJdEbhUeyYaZ42opqBAmnyPXe0r/zMyxUx/7U8x0MubKyoe8VOca8w2dBhf8Pf2CSgdHhAx4EW1Qn8Nb59LFrKr0BdkxrSH1VHCO0QBHRP4dyUeCcrRvFI5yLHZln47U/23uZLeTalV9NUbcaCgcRsMH8S41uJAVoDAywK7xrAsRq3eN3aU a0WOv460M68EmIueNI 3S/tYsuFl7F0ZP7jjFwDI/XTCMdfFw2WyKrLf6wduxQWt TbYemyDSYnLgAg1BY8KtQOJeCC6TBeCrX6WVDMggOPyRKaA/.../M6ehOSPp 3I3tJjaIYjWzz3&external_id=1435435675533425708 (download.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=6uwgRxXIFo7pj56789M6E8QiZez/h0GQV2U54iYOdFiGe9dhoVUV7ME9iHjh/DbXZcsxJVqa5wKfG/1dPnM93474YgyrF6G2DFYzMcdO U3zcNCoTkXNma9AS04mAaIBBaoO321OzP0NuS5vgWEmZemq9Qc30D8blkIgLvdenHfh0FJVKP1MkZx8wchOGS66Jj5cLmJFwpIgnhuGtAZhZO5VCq07e4LXBachDrsQxDGbNX8w2yGF0SFYt/.../NrrNWkPI1mHHhdLOP0qczNC9TRKCJoXHR5np9mZ1OAosgW1nwhShGQjXqP6e5JShv2rpIq 8SZFaInYEowiS6b4rP3fWxEPQCUuGXjYOFnw4kKZffiy67lecNdc9zDONqcUTsUxc1gcTuaqFyuLNPH50&external_id=1435438251641162040 (download.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=jbvcGec4aCT7/SUMOQwGQv6sdIYB4tUv37rmV9xkJQ12kfbfdIzWmrcWb6L jke6mSQWgmItTp19ktWtTwTqK4lj5/Pn1DuygqMNLPFx3gY2ibKXCS7esWrO7KO81uBJZLvlNHiOSctvyKbX5JJE2XM2UyNvrp8aJsUqfBHdQeQ hpIrwmqzmqFu/FLQDk5fNmxnHL5MZMGkUH6rEXiN2wEuAQpATKoKKvx3nAWdaj32sSRdVypQVTHxNVOJEQBGUzR0NfW8giJ/zSKfl9lMRCHARBv1di76q9AHA94kvaBvxsF/WPxPgqcvuV3U0gBmZ57Q/Mf30EBycEF5Qi2xjMHQuPsZ2zhFYq5AWI9QpsCZSQOEhI5tNTqn3gVLK01mmMw2z8J/Rf5MTw90OUqP8EX/ED33hCugAdsbBQ96Vlq4gAY dRLNak8dMikDgAbPIcMIarVe6yiAWIyYPbU7QibvVAjU7eIFYfHtOG7OMidl8Zs7x6PEWpncNVwwLVaSZ/.../2SXK4TwEdh27RKqDk2DgSZkjeB3oWflIONXVuXn8 b 3muz8DJBVAMHOCT&external_id=1435433499279439993 (download.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=o0y0JvxnuHkdqabcde/mCo0mMT/EAksZFsJhSVjZQwYIcFi9LiWevd5NeeueT5qjVukFphkdCTPOR2AIvM/5L4ACZx20WwcItJStWlfINFXEr3pu/YyYXV/ssYKLfDwuugyuoth4jqyytXzXawFfd2iFXSLOF4uQK/.../TsR3f23RdEu2mHD7thbnPpduK5qkHukSHoAmRDxa6UhsXKD1II9RqRwQnM4jIRemdVX7w buA C0rSifyTKXCqw3tzGQwt BRvBU9wvTSJPvc1CoySN3M79GtEqGMfD6yoHL Q7ayuY3LdXfvpY6n9v0NijzIsGmnuqm5I7A5UY6e887ZCdbS9kE1 bYG99udRDgYhc7iQEcGGO3&external_id=1435433083220258004 (download.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=3du2Fbxjw8RTYikg01A rKrProulJ5p7vUnlpc0CiMQ4R3CmVaklpAvehWmBIk92eJCKG35MrP HTyElFFpI/IbImOhocO vMVI Gtm3lgvl27YBRmRqjVvo6kOqn3BWaFXh 1HH1SrctJfd4 Ve5ntuSQX72rmz/LJSe/.../jHz8wevNcYyyXPMr30CxGBZG4RXRa7nCoHp1n bbpRfyAcUgS0XZE7L2lG9IeCBAv&external_id=1435416192468877874 (download.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=PE laFb8nfoDjlhabc8aMz8SlTDtgNrVFsw1Q mJP/Xp Ki9 8RtqfebF32lX5GurzryoQhu2hAd d08Lbg88wX32nsZ NNM8RoBmQLgJmxwPHZX9LQIwarMGF7Ai Rr0ho0xilqE0glHUQ/GWt0ejPPwv2iPXDKfvQQqYJpfqTwwKVlbyrY1bKhm1xkRqJiHQCrsF3g2NSnvMDbrdktWSA9y9BtdIGQjUqW3zx17ES1lk1Qcz8JZBtdNT7CZjYS9BBPsIH0aYZsZe1cpc/vtazasD2qk1M7YmBCD7Xp N0oEj1/jHFPpmV4pnRmPwNjsBqwfYhGRDLsYfiZpySkZblD0mrnE0 DlgWefDBXnodv5lcup4q5RYbuDMbsg4hi3ae9cwNXL7yKisUar3ENnrFHvWsh0J4kF5muwO6YWPnw/AW7ozu5JHcHl1DGNmNzzyW L5j BVXpMIF5IRElaXmhfde5YJLocidu018LwJdA1XuKrFK2iovJGUnrISY2K94/8ws3G2sLx5JGTcs7kELgJJV 8VgvTgVDirUvqrCXltc7LW6EDGe/9 BxLwK7AkKTalTY77gL5g70/ZuSnK1ZriQ6rWVZJ9PQKMr FpeupqaCUFNfKH/i2M2UQTksn5htYHtiKvBwPkb 95L54 gAIL0tENbfE4rntNP7INRZmx8op7EKOvI4fspPuv3mpZP/D08iJD5S Vz4oqRXVxWgwE0SNjfyt5hhbl93tsnS2oyLa1xa3mnVLAYLSUdccfyIyKuiXdmhtTV69nIiwT 71DjqUv8M/.../32Y5UUqqWGKLHpjgi 5bXfem76B4obO8XeOj8ktqtdVcYnO3xOBYubKhhtKgGF41THVGN4O4l9aqeeU Y1wCuekuEjFYZcH91zX (download.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=4DLnkDzqTKv04Hwysul6p68F8mz FF7p28x4k55/sDR8m1j5N9fbHZzHFbbp9XpBmvroKMu6cq0ciDXxLZlqFRq7q7QuVgzX3Ne oZFa27HE057pPwCKuNRHnFOp6NGDGS5sMsLNmGAbOyLRKukWLU8nuRpz/dAIZdvTeX4EIANVhsp5rX 9C7SrjgcfNlM5ITh3aWFGzW0PUInteGeOEmzgCwYz5yT/6OPFa5Hqx y66 9tgkk4XVlWQc4XEah38/wwMzlB ADyZRTzGtFOteuHk8nWUS4Yt4bhgOgH8S8lsYaxAb1p/zSuOiQOEhavDrW1CxYwWfoO5fZDlzl6IleLZCSu0qSNFbghKFXEPhxphOrKpyPDX8LZJQrJCZdjuPh9Iispkj7ewObdtR5gkKp0rJtjJ80Fm1AIryLkE8M87ksCeFKVKnI6ueyy4FVFskTuk2kFqZ CcVEVSCSbf9UADTCuAlQuMAXFUooRmimIgMUg2Rz8sw/t/IXxUzwivWIJVL9q/iwNbdlZP/PTr3cw9JCiZy9zOZlsw2j//w8irdAwDdsPN93lKPnT2FNxHu oowIKy7JS6/.../oj mYlNJ3LsQZ3KAYeDrZEF0Ck3nwf3tGwW31&external_id=1435440972270176433 (amal.maher.welad.el-nahardah.2015.mazika2day.com.by.mado.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=weHk0RFrAyfOQ23456Y8bWg3gRYk7xTqoKajz940jUZBw89j98nCOZBayDx7CjuUbrAuD0c7Q9KVwrEC2zRZB4zzIzv/NzHRZv0tFQkrO9o8lt6zoiSa68Q9phd5YfBdUkTI2FVDo rELYvxDUi4fgsabDUrasV4hPJzSLeNEK7oLpJaH 1d2bbRmFwpWsHG2wYe07TAtVJwIZI5BdxLMpDkxIrXCpJmxJFQzfYCgXIaWG7R1BVhlahWEaiS3E2ZPUhNrUz6dmsiO7PjPfWHl3fsCtBmsWlIiEAx/baAzY5juSWDB42VS3thlDDxpLGq8VB6CSFbZYDjKsiSjlKS53mLA/vhj0wMlFu15XtDtSBm8nGDc6HHgP8kR9yLs/gvkHSnw/.../Kjhrw9G7xc14jdh5VnSuSRYtWgHpYLTW DIPB8BxSrGgWT&external_id=1435439981526017380 (ultimate_dynamic_navbar_v23.2_apkpro.net.apk.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=9y3ZVDzuc1AOQIKEG pgKptGyCZLG27kD/SQEpUt7zW1XPDcJgwPex yiGr1JYmFYTuGIbkJs7aN0wCu7UeW1wVyaLvZ r/j6btt7PqQNOae8NjF3WsCgb5/.../tV5mgw29vWimNO67GIlHVhl&external_id=1435418422376450230 (bailando enrique.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=XNPupjAMFJcz3FHwysjdcpsZhNKK25VrSavBLKAkgOs YUXykuZITpBd5fYJGqRKwAd0E11VuU2Z4zLmg/Yq9zUJiWkCtxo9bdyXqM/Vs0S9cP0lpUw1IOTL0dLhgEY7gq7u1vKNdzHHv5aR4idj5wHLJqqLh2HIasGLTi9WFFODt/rkLeKIwqvfYxPQ4lVrlgjx6C3fXHcuRNNtGrvVlsqz8KIOuvTpMYXKdObX QMJTBVagGqTI/.../qBUD8iZhhcOub7iwYk9ilJaZMyB4Dn957nuIKO0SsuCi8yA37xi3EsiY8LcJG61O89k4I6uttBdwcdfOSDNsfg00I6aDl BwDgNvBX5E51z0Rg3l&external_id=1435427087847301562 (download.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/.../mvhlvnQbf9LMI2B og8C97AfoMQBPk&external_id=1435426783923689213 (installer v1.25_.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=0QUxCFa5opmYivqomj3M2wKklTZwp2y9FaZlhQDEPEn f3i zS0vWIiFTG6X5EIi0pSHB19QbuXIcbCT5JEGUsZk6gO91coRTrM4nLT4ETd4BtPV7XngJgyxXUir9sNXL6/9OkEFkp3o6ssl9VJ/JydngVqjxODvonxvfhWjBzw9r1yAhyDDpoSDtY9vaL5IcrO6gkg7C1CAIN/oCZuN4OPnSvVOLTvpJIa6DiGEJFyxbkGeNims/AO3JtSnBC2Dss80u0PIJFP e29exli/PF76IfwJLoN7sN nhJTDfmBRb4F1J93dxfiyEbAFhD4dlCp38gAU1L orbv8KOM0EdvtFWut2kUY pllxK4oGOmsnGaU82ZVVTw07Jh6ZYjejB2PotOWyEU7scdWmM7Za1yelCotHUvBtcAr624aiV7A302jG/KiwOnMS4JXnbb6gsF9E6QVnPqFKJFX677pF3mOxkVTqQIup84XrOwkjT30z0rTBGybRtT5YR9LwJ3d7Yj642tLqxXntIx4zZ7qB9xlT bQVD0RLqBy 1gA/TveNGH4aBB qAYH/I3OQziyEI avrH/oY6tfiYzCOVosVFJbtuws7KT6590SY 38xKEXWA/wX1be9IcAs3xqARprhPsxnrpAWhn7ZpimjwVChsixSqra1gcxDN9QeDiAnTu2tu/.../asPpItB 0uTqGryXgQJ6gLmunhtsuLpxRUAa&external_id=1435417954665491631 (life in a metro 2007 hindi 720p dvdrip charmeleon silverrg.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=I6u2FbwsbzATe xztvg74wDg9tAP/KtgcdDIR4OPhgnVdWETCPNsS9wWm XHtBBX9vP7bKUaS7JSmsozBLMGlJT9Ip/vLsMzzX7y5STv9E48T9i9aViaKMjrRJMSIXfyhnNCMcbzUQjwyYcwmMnlB2PS6TYQUu3DMueh9csx6E71 Bm 43EiFQFMlzi1yx4ESQgiP1nr7Zw4f6Mwq6CvTadveCufX8NG7qvl2AnC9QRKpHk/jPloj7BwQBfnNC1bvhvT1oJESpYzX A6XpbLX3kE7d9iXqax0 /vuSmXBRQgrU3sM16doCZNFE5QV7Mo0HJFqJT0ZSncGZOS pG3IvAKUfLe PtsbTkRO0i9jJWEwN84n/3p6FU/jfIkX7WODqoVbKDF0OvO9iYRAi/ljjwWky0nWFWEFTxDo6U JfeSFI4FXiTzCnF3N uS uIaQZcyfLM WGBywzbj0K36R kmCMA8JBbBDk7c6/E0mHyjUeBDf6ISqVCV2FMkRatsh3Wi9oCeLrSAllMjPBwrTBGyg1CP SJc1wJ32nZgabnHzIbCGomtUv7g5cfxJY0FiEmuLp4z0814Ev7WSxPY9cnFk394xCBi9hjUZhbcNlrJ3e4EyZz2a4F37OVxCnZ3eT UTYI3Ij D5kf032x0YjhcL/uZpbfV3NLmboDzb79uvIQBnmoYi8HNgqs98g2otZf//.../p2jXq16aes 8hhWip2MEaCNOjF5614xSaMJGbBAjKhOX43iQgEWTxWksHEQWPheFiF0OJTbhATnhsvES v6AwD1g8Ojs&external_id=1435425228467833011 (fast and furious 7 [dvd screener][espaol castellano].exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=XXZH7UADz9uQB xztvg7L29kdaA/wIQCeYCRc3DOApHFNAaUKlxf4IwEa4qM4yhP/tljBD7fDUOEVwxDFVolwroOVKEP7I EtrNpz 3/VjTcSZNDo41Y4HeTverLd7FMiqokWTePdFwEWkR5yTaOG2ZsiviuqdbXwkyZ9qaBIqnH0Byo9eEdCPn0SKa9G9Wedcbbc/s0U1Edm1v ImdK5PgAtZQT3H0n39BYM7x71VyYU19cxrgZBbzItcnnduefNgKWzVHNa0urute2S7wb93n/.../FSuq7hfemRWsR&external_id=1435426967140417826 (fast.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=5AWEfBVPywvBKkg012Bh6NTx6XqfdGEvitribCQr5hkZRTKIVTSf3zDrCCEOZ7aIOYmbXv80iboBW6INt7TAsZnfmaBn6RgAqxEzmc2qOuZ1VU4axKOrtXqMghHQMcWFtREUBN5A81ZLXCcxvg0 vZ9eBlN33Tw4fU2aTKM tMYFEvBx pm 5FVsMsBZcFxevmA5ICx/VbhDknlNzmc0bRbjM29If/FoPzCVAmYm7bc7wX810HdlxPD2qr34cUxDjRFa9hp5/.../Ov5QfGSyf5HxzU0QkCGmZBWHUtAfjhuAob39uQsn5y6KPikGt2xgteqlgFQRtYRCiyYZwN&external_id=1435426989388543586 (fast.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=8SIqm4a99U3xxztvqo1L 9PS/JeV5y6PNxmGSgALlXGvGK8moAuuQpCh2WMqtPRL0SYgsaGC9kTujAvhRsN5Yh27u8yYSBsafSv PAiT9ZIEhy9UWWzJxOym7NePkmgmM b2XVVxw6fdz1pyCjCKd0C/ub1HsLw4MAC/DEq tQcIqv9ajnQUjXVzKyEY04x5GeCV al/ZhubcHfyzmangnz1jRRI6XdaG/l/.../nca5JWUzpoI27ijEUXUcApqiPnxJgBbevKZycwQfWzVbYxudeZBkSTBE7mhsgg NXvRX9tMjv8HkG0UhRG4YBEN2YeYQ8tkCNgs&external_id=1435427010345752910 (fast.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=zv/L55495uweIMOQIKs1swzijblW2Sljve2wqDjrifotgoJVtpA3VEjZ3n3AaBn3ewkjYD94rG0AnHPrz2iGJP93rVVlUlCTNxwHAlWoYdwxU0g7bSauD7F6opoNmygoqYDkxC3eSfmRGUHKiA8vL84KxE2Gulkbrl5Xu4bfvUBM4As1bb8HqexKXBDW88thrD0NyNibC9cb8rwZ0ib9wJyCY2RrspUrTwXHP1s3AhyHy8hJfnS4K9TpThoispYzw mCtS4fiHfgVFMn Cre/jAdIlC297bTVem968Csu/Rx1rbpgdjVeuLh5iHo8SqVh/KUGq62YhriPHK61e1yGrHXJbuc4fogQBD68vaQ6xgTbMuCdBLeMgquvZwFigbKpyZCPJhg4ElQmPMsOnVD8dpGpAAdKxhFm7YBmRYjDNzhK NGcCqqpCFMoWt7moRRGwFV7RazbnJNCva2Ta5Hm Twc96CeQhCkruWHExd1gsGX43e/NDu7Eib8emKkKLgToIqhtlJutBTlh4Snd1G/.../pYVSUYOIKbG4UjrXhZ&external_id=1435418887575887475 (ms office ultimate 2007 working serial.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=Qws1LkDUJTiBavqomj3MH0PbHgL3AQtzGUyrYMJGp0pZ8TDo9a4N2LZaG1H1tCvgBuQBy8KelQNFb6AK sQTHd1/JjcPUAgHH0f3pjGOHVzYH7GhVTOEAW AuADFLYs0EJbf7trRBwtB2ASanIem4CMXJwUw24Uv4idBbqtgfuYzMojv4i8ZWQbPU9hYzLcRSAngdmYCYEloFTtMkvTc7WnKGWuc1KKjXv7HkD0PM UmJUvWVBg2aWOUca6H3d6Uwq80ODSvhKokWo5xyhz/udbvp1/2lwCsoGU2Dc5R/SjmFKBw9reGHtRdYI/0lC05 e2ezLOk0YMuC7RK6dutN0vOkaO/sRMqg3UJ7lhpRcrAgnwZp8Wb4uIYeOCDopUnu0ztyFCCXA6NibKPoudNUodPr6VPmQnlhQ7uwta0qd6h/TfD7s3hvl9cz64PFyLZ2hlnvWv4w8HRJ3lf8esXD5Rk35EQ8ah/ZE/kseIX2fcMa3ZpIG3xpqiQsUqHOWJuW6ojDfR9IoNmVG5RI1pyEKO1rIYIkL35LHJDuBMuoo/L12HFLtjc85FmnG1VxMEVZ1/eqYLpVEiDb/GsPv2HkIf0bkFPzMu4zcBId7Eqb64SeDbvnpwcTBSp7Mdq4/zwDucYIqu9z3Ly8sfQSnmgmTEfDu3fpDXeZxCgaJADjc7Z3AuyeZ4TCdmQ2rJcxGGfwfoFiz94h/.../ujjWoyO0sdSjmtUDeCSJwpP5JcG9tx&external_id=1435435312611319648 (mormon doctrine - bruce r mcconkie pdf torrent download.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=oGVyu 6B0DpUqomjlh5qQuzYNooBkTPFPF0mRxDF8cRgEJk/12HR Ygt39b25eEyeN38BtOtvMDtu0vAif8iMWFoiCfznoUukSMqDjqRNVHKiod9H0FSf TJvwwKsXMr0M8T2jemRTnYLd1Y7MsB50WJaOvrB4ThvqSyWUrC6iCzEHMtIPNOxPSBX9a/BBQnO55s0oyjW88YvcrlCQQNuYvHwjLZ3nQdt07FiOKKX47ChG/z/wcAPjCbfBUYD5 Imq9fP3glshC5q3wAUNDR82LeSt2glJsZTtkhR7mJsTyPoN36ff95iGcQluZwTh6XwBDBVWkc4C7eBCin5B nbIm7hv/D4ZNDJsSkmMnsThhH9LVW/B5BSt5cw n8TZaerNo95mnGWrYk/JbhPCJC8s W0Np3ngB24w/7JAJ2FVEEEy9kOt8eq15CD6Z0PFxulspEMJOPCry97yadLCxA326JbKNnye0HWXwyi5wGWftLxPEd0KrWPd6fRvVEw3JXMA87n8DOPUfOw2M4Igl3eGasKbsOI/iySsPYfrFFB9Y6/CcKShiF 0Nvtg26bDv/kGERINosqHDCOPEBzW9iSNyI7 WiIl0MAEKNFw8F4TywuvWWMhm6Mgo7fX0RV4fELtpg2O5qfuWsNu7JVb2ep5bdP0sZLtC4iBZCpLR5D/S0tIhdYr3ycWK7Bp a KQG1Of/XVl8F6glrNEB9C45SmsBxHHb081mjqb8Xfv0M2KxDflVOY9VRdBg6yYwV6NbjpPV7Mo1WH5p6G3cGJE0mo26TW/KlqcyA/.../NhhLXas99uO (download.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=6ZzaKokby5wiCDWYSULNZJJkjlmq2ug00/5glXpeh23klCkezuMDrl9tne 3b/FN3n59BAt9VwrLaI9t/.../jvnUfQsJ2zTR1snDnpllJtFSVfn4X D40hdg c3OHCNjAsZoYUxIhk5zItDVY92AEoj5k98EXNMOeSdu2wH6tlTY6xXlXrE0YiaT62egpaBxO9V8zwZYFDJDqfhJo8CV67WjyLTc6pkT4blgzVAXJnV5sYjxuHvgZxDXTCeLQraDBnMWyhbtTEO qSNOqAHaAdqaZcV3Rl oxBwDqdBoID6OANmV7M71j420UvF5tbmLDrf5mCW3xhmFLZkfuVmM43NvcSvxQWqK FPftWfmzE9MMKdFTw2ABTV44NFdnMgvodSX2KOtZUizRLLIRntiEkfsL5pOiLDqKxV33rJnZwsvmGEsR2zSv8EHCCs KTqQ9vuCXtbHlQb3LnyCNTIeSr1qeHCTa91734M bUnlTf7rwcRB5cGtEdBzi wDhylSp4t5RddLzZgnS3e14nxgE0dIjW dEQWVUxZFgerr&external_id=1435436695372890187 ({blocked}.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=f0 laEg1bhe3VIKEG plkK5xUpQaJe8nI HNp3 nTT4nQ8lWS5wkbED8Dxm7i2Dos2DnTFA0i6 nm14Pnq2wrL4dhg//5LVP1i9kJ c/1ccOgX/1vQNUsh8o2WRFqYSHyDGBMkYrSiftjXfojlm91hwW C8oxYl 3hVV W4ynMA1MAYy8Z7KfcH9n9EpIP2WnXQ9adieM9/2rOrt0u2eQ48EfDy0QmblT8iNeeLgocKeMCRnu87FRpLGf8g8Ul3rAMZawn5Ik14DD7MiwyQ HN483DAfoWG5cnJ3AW1YJ/pdxQ8C0yAgTb2OeneoizsN dBiWDJUS0kpcuYAdDi7buSEzuLAd1u g6ng/7aT1jIWRo2uXRdCnECRe86V9eTReR9R52whLY5a4WVD2YsUWTbCNytSMCzl36WgEJEgWrehlZge/juzJnaJm1PrRw89JiJpeJ9ywG0XZjmMR0KgcaKMq2owULeIN4MiqUr9KnqiTXeor2sPVVFtQuivDkql GRGTb9zrunoubpjzU0Lq3eP0NdOPJ60p1fviQvW0npJ 2f7GyAq3 d5Q/PN7J33EP7cxnaFJdcDOqjkIj4whNE/XQB MjK0EgJ/4NV1w/.../ONsS3zNYcB 8yA8L0j41 cj4fW7nPARZStHMDjaTRbYTSgmGU7k0Spm9bdPvuUIpSDxndevDUi41bgEQDQIoVS96B8M1lKuxSmZmF&external_id=1435431384789843497 (download.exe)

1 / 68 (Malware)

http://captain-force.ru/hp/?q=zgDKeec4mFtN/tvqom2TPIeUu7RPJzT8xiG8aq07aIX2mZPM0jS/KU/44PEAYTtrf5TkYtBjDjFwi/ymHG/KiwOYKMth3sWIvntS6pbZqvLwhU92 962wrP/U0gfmCw5xs1LR fCUpr HFc2vv1FMhxKZKgiKdlVIblwnOf0Uh93pIrntqOoa5UwmcxVSZTT/DxuMAw0r5qErpojAfkp48e8dj ce0EK2EZYQY8Up 00X1f61J9QGeaT2L/SFyTwVFsM/.../KRfLJr3ODhL3jtUqy&external_id=1435437129836430709 (game setup file.exe)

The following 2 files have been seen to comunicate with captain-force.ru in live environments.

TCP » 52.27.128.56:80

updating.exe

TCP » 52.27.128.59:80

download.exe

TCP » 52.27.128.62:80

updating.exe

URL:

http://captain-force.ru/

Network:

Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:

CN=sni111108.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:

CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:

openresty

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.