skymonk2.bin

Skymonk Solutions Limited

The file skymonk2.bin by Skymonk Solutions Limited has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. While running, it connects to the Internet address v-5-326-d3695-85.webazilla.com on port 80 using the HTTP protocol.
Publisher:
Skymonk Solutions Limited  (signed and verified)

MD5:
b02bff2a950f82efdfc9348254cfd132

SHA-1:
6cb15b77cc95638290ae4614ffb631559a7dd6af

SHA-256:
d93eb678b0559788ebdae3a4dd4ebb3b6fed9335be7d87c1677934fcce26ffd0

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/26/2024 3:50:36 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.SkymonkSolutionsLimited.L
14.5.19.1

File size:
353.1 KB (361,616 bytes)

Common path:
C:\users\{user}\appdata\local\skymonk2\skymonk2.bin

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
4/9/2012 2:00:00 AM

Valid to:
4/10/2015 1:59:59 AM

Subject:
CN=Skymonk Solutions Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Skymonk Solutions Limited, L=Tortola, S=Tortola, C=VG

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
632A5F301191DF03C4933D982BAD525F

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to v-5-326-d3696-86.webazilla.com  (78.140.170.86:80)

TCP (HTTP):
Connects to v-5-326-d3695-85.webazilla.com  (78.140.170.85:80)

Remove skymonk2.bin - Powered by Reason Core Security