» lik-kuzbassa.ru
Overview
Analysis
IPs Addresses (4)
Downloads (27)
Network (2)
Website Detail

lik-kuzbassa.ru

Private Person (Proxy Registrant)

Domain Information

The domain lik-kuzbassa.ru is registered by proxy through REGRU-RU and was originally registered in June of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Kiev, Kyyiv within Ukraine which resides on the RIPE Network Coordination Centre network.

Registrant:

Private Person

Registrar:

REGRU-RU

Server location:

Kyyiv, Ukraine (UA)

Create date:

Thursday, June 26, 2014

Expires date:

Sunday, June 26, 2016

ASN:

AS15626 ITLAS ITL Company, UA

Whois:

1 lik-kuzbassa.ru record

Scanner detections:

Detections (96% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCube.ITHOLDING (M), PUP.InstallCube.DATAKOM (M), PUP.InstallCube.FISHNET (M), PUP.InstallCube.Narzan, PUP.InstallCube.KamaSoft (M), PUP.InstallCube.DISMTOV (M), PUP.ICLoader.Softstor (M), Adware.Bundler.SR.Meta (M), PUP.ICLoader.IPOKART, PUP.ICLoader.TEHNOARH (M), PUP.SmartIst (M), PUP.ICLoader.SoftTras (M), PUP.Adware.InstallCube (M), PUP (M), PUP.ICLoader (M)

96.15%

Dr.Web

Trojan.InstallCube.973, Trojan.InstallCube.1023

7.69%

Emsisoft Anti-Malware

Gen:Variant.Adware.Strictor.85895

3.85%

ESET NOD32

Win32/Kryptik.ESZN trojan

3.85%

F-Secure

Variant.Adware.Strictor

3.85%

Norman

Gen:Variant.Adware.Strictor.85895

3.85%

The domain lik-kuzbassa.ru has been seen to resolve to the following 4 IP addresses.

August 15, 2016

July 28, 2016

July 7, 2016

silen649.vds

April 8, 2016

File downloads found at URLs served by lik-kuzbassa.ru.

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=??? Kenworth T 908 - (?????) ??? Farming Simulator 2015&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-122-20&timer=3 (mod_kenworth_t_908_-_tyagach_dlya_farming_simulator_2015.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=??? ????? - "Mack" ??? ??????? ????????? 2015&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-263-20&timer=3 (mod_tyagach_-_-_mack-_dlya_farming_simulyator_2015.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=?????? ?????-2&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-314-20&timer=3 (dolini_altaya-2.exe)

1 / 68 (Malware)

http://lik-kuzbassa.ru/.../download.php?data=eyJwYXRoIjoiaHR0cDovL3NpbGt5Y3JhY2tlci5ydS8xOTk1LzAvMC8xMzE4OS9leUp6YVhSbFNXUWlPaUl4TXpFNE9TSXNJbXhsYm1SSlpDSTZJakFpTENKemRXSmpTV1FpT2lJd0lpd2labWxzWlZWeWJDSTZJbWgwZEhBNkx5OXlkWE5wYlhNMExuSjFMMnh2WVdRdk1DMHdMVEF0T1RjekxUSXdJaXdpWm1sc1pVNWhiV1VpT2lMUXROQy0wTHdnMEw3UmdpQmhkWFJoYTJraUxDSm1hV3hsVkhsd1pTSTZJakVpTENKbWFXeGxVMmw2WlNJNk1UY3pOVFk0TENKd2NtOTRlU0k2TVgwLCIsIm5hbWUiOiLQtNC-0Lwg0L7RgiBhdXRha2kiLCJ0eXBlIjoiMSJ9 (dom-ot-autaki.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=??? 6501&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-391-20&timer=3 (maz_6501.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=??????????? ??????? The Millennium Falcon&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-406-20&timer=3 (kosmicheskiy_korabl_the_millennium_falcon.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/cs-xgm.php?action=download-direct&file_name=??????? Public ?????? - CS 1.6&file_size=4.2 MB&file_type=cs16&file_url=http://cs-xgm.ru/.../0-0-1-504-20&timer=3 (skachat_public_server_-_cs_1.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/.../download.php?data=eyJwYXRoIjoiaHR0cDovL3RvZWRpbWVwdWxsLnJ1LzE5OTUvMC8wLzEzMTg5L2V5SnphWFJsU1dRaU9pSXhNekU0T1NJc0lteGxibVJKWkNJNklqQWlMQ0p6ZFdKalNXUWlPaUl3SWl3aVptbHNaVlZ5YkNJNkltaDBkSEE2THk5eWRYTnBiWE0wTG5KMUwyeHZZV1F2TUMwd0xURXRPVGcwTFRJd0lpd2labWxzWlU1aGJXVWlPaUxRdjlDNzBMRFJndEdNMFk4ZzBMN1JnaUJpZFd0dmRtdGhJaXdpWm1sc1pWUjVjR1VpT2lJeElpd2labWxzWlZOcGVtVWlPakFzSW5CeWIzaDVJam94ZlEsLCIsIm5hbWUiOiLQv9C70LDRgtGM0Y8g0L7RgiBidWtvdmthIiwidHlwZSI6IjEifQ,, (platya-ot-bukovka.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/gamerve.ucoz.ru.php?action=download-direct&file_name=GTA San Andreas Best Mod (2012)&file_size=11.8Kb&file_type=cs16&file_url=http://gamerve.ucoz.ru/.../0-0-0-781-20&timer=3 (gta_san_andreas_best_mod_2012.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=?????????? ????? ????????? ??? Farming Simulator 2015&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-117-20&timer=3 (ukrainskaya_karta_cherkashchina_dlya_farming_simulator_2015.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=??? ??????? ??? 6-?? ??? Farming Simulator 15&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-188-20&timer=3 (mod_traktor_yumz_6-kl_dlya_farming_simulator_15.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=?????? ??? ????????? ???????? ?????? ????????? 2015&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-105-20&timer=3 (pritsep_dlya_perevozki_zhivotnih_fermer_simulyator_2015.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=??? 2107 ??? Farming Simulator 2015&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-101-20&timer=3 (vaz_2107_dlya_farming_simulator_2015.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=???????? ??? Farming Simulator 2015&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-67-20&timer=3 (zhivotnie_dlya_farming_simulator_2015.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=??? ?????? ?? ?25 ??? Farming Simulator 15&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-198-20&timer=3 (mod_volvo_bm_a25_dlya_farming_simulator_15.exe)

2 / 68 (PUP)

http://lik-kuzbassa.ru/modstalker.php?action=download-direct&file_name=?????????? ??? ??????? ?????? ????&file_size=&file_type=cs16&file_url=http://modstalker.ru/.../0-0-1-1004-20&timer=3 (sohraneniya_dlya_stalker_chistoe_nebo.exe)

4 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=??????? Farming Simulator 2015 ????????? ?? ???????&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-15-20&timer=3 (skachat_farming_simulator_2015_besplatno_na_android.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/modstalker.php?action=download-direct&file_name=?????? ????? 2&file_size=&file_type=cs16&file_url=http://modstalker.ru/.../0-0-1-534-20&timer=3 (taynie_tropi_2.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/modstalker.php?action=download-direct&file_name=????????? ????????? ???&file_size=&file_type=cs16&file_url=http://modstalker.ru/.../0-0-1-406-20&timer=3 (nebolshoy_oruzheyniy_pak.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=Farming Simulator 2015 ??????? ????? ???????&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-10-20&timer=3 (farming_simulator_2015_skachat_cherez_torrent.exe)

0 / 68

http://lik-kuzbassa.ru/gamerve.ucoz.ru.php?action=download-direct&file_name=Stubbs the Zombie in Rebel Without a Pulse (2005)&file_size=13.2Kb&file_type=cs16&file_url=http://gamerve.ucoz.ru/.../0-0-0-472-20&timer=3 (stubbs_the_zombie_in_rebel_without_a_pulse_2005.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=??? ??????? ??-75 ??? Farming Simulator 15&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-143-20&timer=3 (mod_traktor_dt-75_dlya_farming_simulator_15.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=??????? ????? «?????????» v2 ??? ?????? ?????????? 2015&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-268-20&timer=3 (russkaya_karta_derevushka_v2_dlya_fermer_simulyatora_2015.exe)

2 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=??????-?????&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-318-20&timer=3 (samara-volga.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=Milk Truck V 1.1&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-334-20&timer=3 (milk_truck_v_1.exe)

1 / 68 (PUP)

http://lik-kuzbassa.ru/farming-2015.ru.php?action=download-direct&file_name=placeable CarWash (?????????)&file_size=&file_type=cs16&file_url=http://farming-2015.ru/.../0-0-1-331-20&timer=3 (placeable_carwash_avtomoyka.exe)

The following 2 files have been seen to comunicate with lik-kuzbassa.ru in live environments.

TCP » 185.53.177.9:80

fb-commander.crx

TCP » 91.210.164.36:80

URL:

http://lik-kuzbassa.ru/

Title:

“Скачать файл - Archive.rar”

Web server:

nginx (PHP/5.3.3)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.