home

xn----7sbak5bugi.xn--p1ai

Domain Information

Server location:
Moscow City, Russia (RU)

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

avast!
Win32:Malware-gen
100.00%

AegisLab AV Signature
Backdoor.W32.Agent
100.00%

Comodo Security
TrojWare.Win32.TrojanDownloader.Dadobra.~JK
100.00%

Dr.Web
Trojan.PWS.Banker1.19799
100.00%

Avira AntiVirus
TR/Agent.502784.34
100.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
100.00%

Qihoo 360 Security
HEUR/QVM05.1.Malware.Gen
100.00%

The domain xn----7sbak5bugi.xn--p1ai has been seen to resolve to the following IP address.

178.208.83.21
s17.h.mchost.ru
April 9, 2016

File downloads found at URLs served by xn----7sbak5bugi.xn--p1ai.

7 / 68      (Malware)
http://xn----7sbak5bugi.xn--p1ai/gala.exe  (487170dc2a3741d8a15fbe20f7c69007)

incomebox.ru

mcdir.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.