cdn.zyczu.pl

Domain Information

Server location:
Mazowieckie, Poland (PL)

ASN:
AS42503 K2-AS K2 Internet S.A.

Root domain:

Scanner detections:
Malware distribution  (76% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), Threat.Win.Reputation.IMP
86.84%

McAfee
Artemis!AF94B2D555D6, RDN/Generic.hra!bx, Artemis!EE0CFB150E00, Artemis!F84CB2DA7EB2, GenericR-DOI!A093BC926FF1
13.16%

Agnitum Outpost
Trojan.DR.Agent
13.16%

Avira AntiVirus
TR/Dropper.Gen, TR/Ranapama.AH
13.16%

McAfee Web Gateway
Artemis!AF94B2D555D6, Artemis!Trojan, Artemis!EE0CFB150E00, Artemis!F84CB2DA7EB2, BehavesLike.Win32.Dropper.gm
13.16%

MicroWorld eScan
Trojan.GenericKD.1618663, Trojan.Ranapama.AH, Trojan.GenericKD.1625202, Trojan.GenericKD.1620052
10.53%

nProtect
Trojan.GenericKD.1618663, Trojan.Ranapama.AH, Trojan.GenericKD.1625202, Trojan.GenericKD.1620052
10.53%

Trend Micro House Call
TROJ_GEN.F47V0221, TROJ_GEN.R0CBC0OE314, TROJ_GEN.F47V0329, TROJ_GEN.F47V0325
10.53%

Bitdefender
Trojan.GenericKD.1618663, Trojan.Ranapama.AH, Trojan.GenericKD.1625202, Trojan.GenericKD.1620052
10.53%

Lavasoft Ad-Aware
Trojan.GenericKD.1618663, Trojan.Ranapama.AH, Trojan.GenericKD.1625202, Trojan.GenericKD.1620052
10.53%

IKARUS anti.virus
Trojan.SuspectCRC, Trojan.Ranapama
10.53%

Emsisoft Anti-Malware
Trojan.GenericKD.1618663, Trojan.GenericKD.1625202, Trojan.GenericKD.1620052
7.89%

G Data
Trojan.GenericKD.1618663, Trojan.GenericKD.1625202, Trojan.GenericKD.1620052
7.89%

Kingsoft AntiVirus
Win32.Troj.GenericKD.v.(kcloud), Win32.Troj.Generic.a.(kcloud)
7.89%

F-Secure
Trojan.Ranapama.AH, Trojan.GenericKD.1625202, Trojan.GenericKD.1620052
7.89%

The domain cdn.zyczu.pl has been seen to resolve to the following 6 IP addresses.

April 6, 2016

April 6, 2016

ocs-pl.oktawave.com
August 21, 2015

ocs-pl.oktawave.com
August 21, 2015

ocs-pl.oktawave.com
February 7, 2014

ocs-pl.oktawave.com
February 7, 2014

File downloads found at URLs served by cdn.zyczu.pl.

0 / 68
http://cdn.zyczu.pl/DokuCraft-Setup.exe  (efcb60a938d3fe04755e96d2bc1758ce)

0 / 68

0 / 68
http://cdn.zyczu.pl/Defscape-Setup.exe  (7dd79f464a473573e72e401d4e9553b6)

15 / 68    (Malware)
http://cdn.zyczu.pl/Minecraft-Setup.exe  (af94b2d555d6958060c85bc486b74293)

0 / 68
http://cdn.zyczu.pl/download/.../MinecraftZyczu.exe  (1a097075b589c033821ebe824f044967)

7 / 68      (Malware)
http://cdn.zyczu.pl/Sphax-Setup.exe  (a093bc926ff1281e7d08a5da821d167f)

0 / 68
http://cdn.zyczu.pl/SimPackPVP_32x32.zip  (6fe9dbfdbbdaac70e20eed6f28349b51)

1 / 68      (Malware)
http://cdn.zyczu.pl/Faithful-Setup.exe  (d9cdb35d325fe2adcc7f2da76e095369)

0 / 68

1 / 68      (Malware)

1 / 68      (Malware)

15 / 68    (Malware)
http://cdn.zyczu.pl/CreativeOne-Setup.exe  (ee0cfb150e00ebaa474a4571a46c4986)

1 / 68      (Malware)

1 / 68      (Malware)
http://cdn.zyczu.pl/.../setup.exe  (9b57847fa31e3f1174fdaadfbe0ed7cc)

The following 2 files have been seen to comunicate with cdn.zyczu.pl in live environments.