home

w382035.open.ge.tt

Domain Information

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:
open.ge.tt

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

NANO AntiVirus
Trojan.Win32.Jorik.cqkxko
100.00%

avast!
Win32:Trojan-gen
100.00%

Avira AntiVirus
TR/Agent.169472.40
100.00%

G Data
Win32.Trojan.Agent.IYO402
100.00%

Bkav FE
W32.Clodb70.Trojan
100.00%

The domain w382035.open.ge.tt has been seen to resolve to the following IP address.

54.247.122.87
ec2-54-247-122-87.eu-west-1.compute.amazonaws.com
September 5, 2014

File downloads found at URLs served by w382035.open.ge.tt.

5 / 68      (Malware)
http://w382035.open.ge.tt/1/files/2Dn5uuW1/.../blob?download  (internet download manager 6,18 full free by anas.exe)

The following 2 files have been seen to comunicate with w382035.open.ge.tt in live environments.

TCP » 54.247.122.87:80
AdMunch.exe (Ad Muncher by Murray Hurps Software Pty)

TCP » 54.247.122.87:80
dce4f1ab.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.