home

a.flaghomeconsole.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
flaghomeconsole.com

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

The domain a.flaghomeconsole.com has been seen to resolve to the following 3 IP addresses.

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
April 21, 2016

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
April 21, 2016

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
April 21, 2016

File downloads found at URLs served by a.flaghomeconsole.com.

1 / 68      (Malware)
http://a.flaghomeconsole.com/hp/?q=IXZH7MWUhZuZ0urpnicVpcmjXlcVkfdxBN6jd0wKJEpGV7Qfqe76WmKbxvaITF a6OhF09YCQdhVgfQKGOUOOG3wnuZwzf/OkIlWdXd2lLP5Vv40dBXorqtUN9dqM1Cjp8XowVz9Cyy5Di8leMDQA2CXdBZrVsOsFzkA16XX6UDvbRp7rVUeEn0CoFjclLCmoUzG3gGPqYxrRWJpGWtvQhwpzk722SCOat/090gm0tppqQ/0wPmjpUs1IjoI5VRf9q3g/h3mHWpBTazg7zfUzsxrn/ZtAnNiIcnSRDiqPNXmhf0PA9iD2UvWj7PMscOVUAekLd6U9/XAdy7sV53EKtPNtlm9yib2YekRldSvjJu3t0/i/MPSQHS9G2GRssE7MBXyjNHw9YRCZ50czzZuPaB08EfYu8lozmAKwLx/Dah Elesc3IAiNrGczsh9HdPld4L/zSQZ8ij5GXAotkp3JDI64cdzN7NyNf2N7UhSp1J/xZGpI71hgTyUnKcgviPoS80XFyAptolvDSPVegJLyk1q8Iv6 KASM4ZPXpqW134oBisHGfJoZOEF/.../kH6FU3ii5Ne56s0 eQRezgtgR2EnkKX Xly87xuI6KXgVGJ3GDVsxZzMLYwRgvdF  (hp photosmart essential.exe)

The following 2 files have been seen to comunicate with a.flaghomeconsole.com in live environments.

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.