home

a.minigagdetbox.com

Pending Renewal or Deletion

Domain Information

The domain a.minigagdetbox.com registered by Pending Renewal or Deletion was initially registered in April of 2014 through DYNADOT, LLC. Currently this domain has been known to host various forms of malware. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
DYNADOT, LLC

Server location:
Oregon, United States (US)

Create date:
Friday, April 4, 2014

Expires date:
Tuesday, April 4, 2017

Updated date:
Tuesday, April 5, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
minigagdetbox.com

Whois:
2 minigagdetbox.com records

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Optional.PCUtilities (M)
93.33%

Emsisoft Anti-Malware
Trojan.Agent.BKIO, Win32.Parite
20.00%

AVG
Adware Generic6.AYWQ, Win32/Parite
13.33%

Lavasoft Ad-Aware
Trojan.Agent.BKIO
13.33%

Dr.Web
Trojan.DownLoader13.35538, Win32.Parite.2
13.33%

ESET NOD32
Win32/Adware.MultiPlug.MH application, Win32/Parite.B virus
13.33%

McAfee
Program.MultiPlug-FWG
13.33%

Norman
Trojan.Agent.BKIO, Win32.Parite.B
13.33%

avast!
Win32:MultiPlug-ZC [PUP], Win32:Parite
13.33%

F-Secure
Trojan.Agent.BKIO
6.67%

Avira AntiVirus
TR/Crypt.XPACK.Gen
6.67%

Sophos
PUA 'MultiPlug' (of type Adware)
6.67%

MicroWorld eScan
Trojan.Agent.BKIO
6.67%

nProtect
Trojan.Agent.BKIO
6.67%

Zillya! Antivirus
Adware.MultiPlugGen.Win32.1
6.67%

The domain a.minigagdetbox.com has been seen to resolve to the following 13 IP addresses.

199.59.243.120
April 15, 2016

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
July 16, 2015

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
July 16, 2015

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
July 16, 2015

52.10.67.234
ec2-52-10-67-234.us-west-2.compute.amazonaws.com
June 30, 2015

52.27.23.115
ec2-52-27-23-115.us-west-2.compute.amazonaws.com
June 30, 2015

52.26.142.209
ec2-52-26-142-209.us-west-2.compute.amazonaws.com
June 30, 2015

52.11.167.137
ec2-52-11-167-137.us-west-2.compute.amazonaws.com
June 30, 2015

54.68.13.248
ec2-54-68-13-248.us-west-2.compute.amazonaws.com
June 19, 2015

54.213.72.9
ec2-54-213-72-9.us-west-2.compute.amazonaws.com
June 19, 2015

54.200.195.191
ec2-54-200-195-191.us-west-2.compute.amazonaws.com
June 19, 2015

54.149.241.47
ec2-54-149-241-47.us-west-2.compute.amazonaws.com
June 19, 2015

54.69.228.231
ec2-54-69-228-231.us-west-2.compute.amazonaws.com
June 19, 2015

File downloads found at URLs served by a.minigagdetbox.com.

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/?q=bRIqm4a79Lda3nikg0fErE3h75 FgYk/W67IujJshxzoYbTqF nuh3HJmdmvfoueWhwWjxZlkp2bsILvQZQIvgY/Ema39i5ed0 DSDRKzDZSnnNdhBMIZ lFOq20h8pBtUrFWN/H4fLSfomaD0Pe5v80WXq0ziyb2 mtfGlSPddvDdiBmKePouYj4ic41uXS96i5uSyquTyX4AxffqzsnZGNHEb9AluoZ9NGfsfxh8kt2RagxN/KEeJ/Yrxkvl/.../MTSfPSAfux7f3IqOTof8ZhNcTzCWEJdkuMX8K  (kingsman the secret service [1080p].exe)

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/?q=AHJpi6DUEn5yu23456YBlq8Z4aKQ13UvNLUXEo7lDErqbU62TyODSrUBoJR6 LvooXYa78M0Y3vFCI13wzDSFkp4LSaii3F6ercABoH4Ygr05GpDQuzkmwfWdr3v41JRUGP7YnHZRcdJ2ySaVB5u1aMuoGZOkvcdB5bpKeRJwIaehwYBF/ZtxEeU3tloDAkywAa24onB kSs3/U8S9dBdDAGfMHZsdu6UuVk/.../O  (download.exe)

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/?q=GmXF6DwkMOMLYSUMOQwGEZx6fs6X2LQuAd5jmVQW1mq6y9hbszZszWFZ3kX TmvIKUqFtDzT63jJ40REXTVjQmV5E1D0fNO4TKxQCblFQ5I0EbxZUO1fcIvYR3oJ8WFChbutV7 R09SMmAkt2SaGYgTwgFcPsI525NJZ47Cm263mPNknKhZG3Y2bfSEqnT3TMrw3rt/vfamW1wA36tof8xDZkM48TuB 7sAWt1ScZUaXwMgkzXP2kJxOLwiasI9czksZyXQlKBbbcVVeJtb67rKGeV6p8WKU3hGOGUnlO2hXunLjq/WYa4Ly50pVSiXogRLVMFzYjIX4QdT4amxwGZwbfWeDNoCbcaP7EgPfivPR/.../MopXrZhEy6 fk3IzN3Ho8h2xlZxrzyNYpl  (ewa farna rzeka marze instrumental.exe)

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/?q=fBGjhOVE5jVGElhabc8axmrQeT1m6ivU48yVTMSJPDCU4q15 CAdW6ebjMt9IiGuH1 cYQhupJQ/To0CzW4RswXA 2XK4g/HTWDjCmw6bB7tZf/FcK2x0VMsoZYi/DeAuLnROkLFWnzRf2h6u2wx3Mpa6Wy5zahAXhOR pSDn16/.../1XdRXGBBPyYKo oovPCwffg6MNcb  (download.exe)

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/?q=dKIqm3mdUI/vMOQIKEuc/LW1NmtRLNlWrFPwn5jENmMWEKCmOaAju0bb2 icyXzjpMsBJI cAMsV1/wHIiqvlakqiK2wpS3TCgKcvb0z9cEkF1s8lP4JQVoxc1j/ JOjjfVsvXMXkmWvLE3cFz9oo qNjIxIvvgyVQuMN/okBCZ wYXZrHy5AthMGhP0okWbEhBB5a6VoFbW6F1fiD6 MhxDRkWAd8TMAXD95AlN/.../fkqzoVNJIY5UaPxkntCLEmD3wFev9HQcx qEcgonht9PPBOMivTSoXtVik2p ds 0W ArkE9hMfD5aiKOEqE  (first_aid_for_the_wards__fifth_edition.rar.exe)

1 / 68      (PUP)
http://a.minigagdetbox.com/hp/?q=rxLnk/vgLcjx4g0123C2zD5pNd07dmDjDMDqIHTFMCgmN0j3xuG7bs7c61bRG4vmGgiG3D6QBurKhQUv/PG/gc1sV8jrDq8QB5I9rfkEcoaeOkUF/t2GlWHDDMCmgGqXvqdjbj Z9EeD/3jrWocTMV73xqEbeC15HKpgW5vh2uSPK2 ESoeWfputV7FPblbvkI4cbopGZ5cizoAdEIJlse/iQTJb WQtZS9lMFLRR4JHPyObIfOon7jqRc0Q6/.../YISWuJTDBse923GWDlehBMyU4gb5UW  (red alert 2 game.exe)

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/?q=2bn5yT5Cq4tmBABCDWPQsLDwuDBBexaBVdlN7OTWW6SQJi5PrI5/dnI8zdWMFR3fN0yMftiyBreNryXD6vsbpL/4qjqEzCISxP4NaIXrGbGNAypRMSQpXzqORdi4Vv1FyFk5gs6m3vXBTK0fPNI/aL EYsuKnt8Hzv58vGo CWvJOS1CMBL4WtRoiuyTESEgA0P5ANWiobIenHPihonwks0V4BjnTn1n4/Vfnnah1IXmHPUv4i6RXQTaZ5hnN/zY1sxIHC/wiAuMe6TzdQn pDPAwHG8N6oLQmDXxaDv8KvN/KpncTJy8oZljxJ6NRTgDDHRP1sAcnz//I592gpRdmBdu5ENIYiWYgLwkjeh7vvi MOBMbCXcHqEHVyJky1CN0q5zKWlqY7yuONSTYQbiOGTww6JEr8lmSINqBsyaIT6 lK6AVGOy8NL6hMVp675qPed7s3Ysw7AGM/bc6KW38u4cSptI79l2S xbs //p4NYJWFtDF3QYjIpzsRnq95tisaLuTWWrdXj8S7qVGucEWIsQV5kcBt0GbwrN3iExfJeFX6fQOxpuSvPX7GNKYBIM cZpBwCjGOW eD  (avengers age of ultron 2015 tc720p x264 aac english chs mp4ba.exe)

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/?q=RkzaKold9JubiEG xziX72JVSm2clz2glJUvpvEbaxaCEbsxhQWTmltTx/ZA1Gfr0dwKdoePpFDITHi7lST1smkqiwYkI2I86JNRsmAwYCCeHiz ZuCsrXQBjZr1694KHcAy/9sTA90A1MUQzG8iYlvfs37TLZxLB3AR NbPItS41ZCzGUz0IVXE/jf1 9Og7Iy7vIqFrXQBpwcVykc4aSdU6gGPa5mVjdacSVLrnGt9IJCshZuuIcsxcfgpKnKlfnJk6VNMID3gHulwLWXASB64HAxKR0wMsAMEIa15afwWm NKDRNSGt1e nVtJPbbej3eN0 /Wo5l2UFX6R35kF/iCAboaWm3yBSjblqU/Ktt7uY6mSvZO5tQSVU5kKv9MU25i/Nje8BEDjZfk3EyCA2cdPII0GR5XASwIX1LyEpwh5PJWTJRN3oSjiEQA54vcVFboNSIDS0JB3KzWkWDrUvGzN9eTYT1GKS0di13M2JAkI3wgKr7LkSYRbiaHrs09oCeGeu/TD6FwfgPizA 0 Su/ndmCTf0i9DprQH4 KiKjse9x8QKvUHK zW9Si62riODS4iJL/.../cILJL  (age of empires ii exp. [iso] [espaol] [full].exe)

9 / 68      (PUP)
http://a.minigagdetbox.com/hp/?q=zZ3ZVDxttZsEAztvqo1K7coj/om0s9LQlGLMaHYzTaaYCG7E39gn1E5aTfHAHLehk6BhWMpR1QgJjvYM5lqFrXFt rAhrUaTzRIDub4K5Xq7xarj6Oj4ZKa78dDVVGCcyKBjo4B7bhpuGN1k0YkS36Lg6zT8jnz2jVOKHMQBxO/NDsKx5A7morqeeXo/qqaW5zuEZrsho9gSidjXtreOwNCT9XXTgNHRfD witCOyQwfG1B RnK2LVe1xaC0RUd8IpXKdSdWuj1c08ETgfH3D4h0FdXHYmQ8rX Zdb IYa5bJA5xi8hSNg g8/AZO1KHFlwrJGRef58xgPDOM wE37PFWlbUiJO5lXR pobur0HhEgwLzpoW813 iHb1x 3eOap/.../YB TdAhfmPtkAzCyRf  (_ internet download manageridm 6.21 build 15 download.exe)

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/?q=QZy0Jqq2amIjYFHwysj40MnhwOsy1JYEEPEtty4sQDJckym0vM aLStNhpm//y/r1th36KFfR7YUWKWKJj3eUA2TsBGMuRYj6gvKc6Xy6xCP512cky2zvMQBFTtQb29c/VMu7I4QNyHkuZSzYivlOvrdDyoNDJJoBhrGXlzi 9PBvEjVRnFMhHEU7s3fQXxhJVePvWIyloc0hL/AdFFCjHEJ9muEDpk5gfHDRZLzZ5 aFKdlI9WPMCoNAZU TuUXbuk6H vXn2x230DzU2RQ5vQ1nXWUoosSesLEMqBDoKdiwDeUWeR3tsEUe2wXbKU05hZWr/wWhQBzJNVEReo1xvAft8N9lJKXBzAqGM8GLUlLh269zrSzo4Huxs0dsW/.../H9VPCQZb5CVyHQdS8bW3Ml0iDf92n3qNNm UzcBgOAJBhmvWhJQxfX8QXFsvknohYqWvqaDOOVFzc8MkrjU8h9gPAXyXz0ZKm  (the following s03e12 1080p web-dl nl subs sam tbs.exe)

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/?q=1ES BNZKsxNmHhabcd9cQtkr9pCZ4Kt1hIKJ2ZHsZhdrZ66IXi07d1mRLUlKxiuZDOewhFvF17G5M/g3sGgwdtgEHUdiKZxv4hm0oG/KgFXzY5D6cZOAT7C1WwdhEHnCXaI1KMovAtTk/ra/BXuS347ADb3NwGHp8VeJAW/FftdgArSXzI5CezySTWB82Yjy3VqcfXuw0Dsh2mOZyeKI2eOT72wy780Wy8NXA/Zdm2Wl3PGuDkJi/AVcBdH1Iip22EfGZR1nTldB77qR0zUX2PWN3EC9fFH/1PovR3ETk0 ERmzI3kosl 2Sj//mlthFpJZw9q5aUD  (chotushkone -bengali.exe)

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/.../T6ZlwwmDmCCmQLmoYN9E5pMaHWWjpha z3qMt9Vjq0VCkevizrGUc8Og2aYA9UbRL65y6UqXwe4Jw4j4Ehgvf3jZJcSgWAavif  (download.exe)

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/?q=IoS BOVFtPjxefABCDNAy4P58AbbQXrGV1gpAZOYfjXlgSO69r9418DdVbr385Tu MnCPq0M84sm1XbuNGjJl7YzLAVpdm/40lAYwNVrAahOpMdnU l//mECSV754Pl/ft1emzO7HU/eTPdhIHeKNaXXpJpm5eKUN29tSf3wkbcdGUmTdqfdNK02lsLGTsGbQWvYR2c9JMHRAU/d6yzwdKJFG2 FLeTn pV/KZVLBYoI13qop/zgn6WFu/uW5OuXe8Ruz4wJMfs0XyZ0HuM2TDf6fHYx3Ux aLsENB47WI96iCeDS5stHrrF5mzhU75D2wrjek9Soa1EfTqJJ/.../6yPh  (need for speed shift game.exe)

25 / 68    (PUP)
http://a.minigagdetbox.com/hp/?q=7a4TNVCPIoXDGfABCDNA9cpClL7fSjoBiDokCveyEyxBwf1LN3p73WV/ETUpU1FCIBpkIcC6Y3/nueooWeRC3iLeV7GD2BqkxBGBoq4QZQoWnPUJ19YjszosXoHL0dkbpgkIi8GqmgAYFTwJrdt8FODAe92vth2wRF Jt2Rv0HL5YeoFb dldqVvihBMNG8r4DCPQdcQve4H5CHk4HI/g tWPBbVZfCDM2Evtr9mMqBVYm23aIWxE0valy7ilZVJlsHp6Q6cHXA3BrzTX4pWdySPVPwj5aNHAmFtI3wcOTsCtZYgfGEqA4wPJHT1P1r6DkT5OiYAfa0LPJLV lVqD4BIa9c1/p2mHgOkhK73YH403woibarMe5L1itF9Kw5G715dbHpkBsT1pxc45vbdW/.../IzG  (minecraft premium account generator 2015 exe.exe)

1 / 68      (Malware)
http://a.minigagdetbox.com/hp/?q=jIDKeec6CaMLfomjlh5pB9YdJhP4lUPFtSqE1xDEyRfTucsZof7g YOD kKyeaIXLm98P/.../YF0E3g 7cymn2yHfo  (download.exe)

The following 10 files have been seen to comunicate with a.minigagdetbox.com in live environments.

TCP » 199.59.243.120:80
qvtp.crx

TCP » 52.11.167.137:80
download.exe

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

TCP » 54.149.241.47:80
papers please v1.0.41 setup.exe

TCP » 54.149.241.47:80
installer_game develop.exe

TCP » 54.213.72.9:80
setup installer.exe (Win by Microsoft)

TCP » 54.213.72.9:80
tmp5600.tmp

TCP » 54.213.72.9:80
tmp61f7.tmp

TCP » 54.68.13.248:80
tmp781a.tmp

TCP » 54.69.228.231:80
download.exe

URL:
http://a.minigagdetbox.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/7.5 (ASP.NET)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.