home

e-bdvscw.banvenez.com

Domain Information

Server location:
Sucre, Venezuela (VE)

ASN:
AS8048 CANTV Servicios, Venezuela, VE

Root domain:
banvenez.com

The domain e-bdvscw.banvenez.com has been seen to resolve to the following IP address.

190.202.16.186
190-202-16-186.estatic.cantv.net
June 7, 2016

File downloads found at URLs served by e-bdvscw.banvenez.com.

0 / 68
https://e-bdvscw.banvenez.com/.../clavedefensa.exe  (75981a08cf2a4d39f9517b386c9400dc)

0 / 68
https://e-bdvscw.banvenez.com/.../warsaw_online.exe  (af5e329186832dbe2a22e0c485a5555a)

0 / 68
https://e-bdvscw.banvenez.com/.../ClaveDefensa.exe  (e86459129d93c9996bbe719deed26da7)

11 / 68    (inconclusive)
https://e-bdvscw.banvenez.com/.../ClaveDefensa.exe  (784225aaed548f33a33c34a393af7be8)

The following 2 files have been seen to comunicate with e-bdvscw.banvenez.com in live environments.

TCP » 190.202.16.186:443
standalone_downloader.exe

TCP » 190.202.16.186:443
clavedefensa.exe (Diagnóstico del Banco de Venezuela by Banco de Venezuela)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.