home

upload.klipbun.cba.pl

Domain Information

Server location:
Noord-Holland, Netherlands (NL)

ASN:
AS60781 LEASEWEB-NL LeaseWeb Netherlands B.V.,NL

Root domain:
cba.pl

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Trend Micro House Call
TROJ_GEN.R0CBH07K313
100.00%

Reason Heuristics
nbsp;
100.00%

The domain upload.klipbun.cba.pl has been seen to resolve to the following IP address.

95.211.144.65
cba.pl
July 4, 2016

File downloads found at URLs served by upload.klipbun.cba.pl.

2 / 68      (Malware)
http://upload.klipbun.cba.pl/.../MinecraftZyczu.exe  (7606cf6fdde23c4384ccc8c141d00bb2)

The following 7 files have been seen to comunicate with upload.klipbun.cba.pl in live environments.

TCP » 95.211.144.65:80
online-guardian-v2.0.9.exe

TCP » 95.211.144.65:80
onlineguardian-v2.exe

TCP » 95.211.144.65:80
online-guardian-v2.0.9.exe

TCP » 95.211.144.65:80
online-guardian.exe

TCP » 95.211.144.65:80
online-guardian-v2.exe

TCP » 95.211.144.65:80
easymargo.exe

TCP » 95.211.144.65:80
genieutils.exe

ekw.y0.pl

mb2707.c0.pl

xenoxmetin2.c0.pl

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.