fileshare7090.depositfiles.org

SONGUL CORPORATION

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Steinsel, Luxembourg within Luxembourg which resides on the RIPE Network Coordination Centre network.
Registrar:
EuroDNS S.A.

Server location:
Luxembourg, Luxembourg (LU)

ASN:
AS5577 ROOT root SA,LU

Root domain:

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Bkav FE
W32.Clod5f1.Trojan
100.00%

McAfee
Artemis!09337AC44479
100.00%

Norman
Suspicious_Gen2.IMZJU
100.00%

Trend Micro House Call
TROJ_SPNR.0CHH12
100.00%

Sophos
Mal/Behav-328
100.00%

Trend Micro
TROJ_SPNR.0CHH12
100.00%

Avira AntiVirus
TR/Agent.kqz.6
100.00%

The domain fileshare7090.depositfiles.org has been seen to resolve to the following 12 IP addresses.

ip-static-94-242-236-65.as5577.net
February 9, 2016

ip-static-94-242-236-61.as5577.net
February 9, 2016

ip-static-94-242-236-49.as5577.net
February 9, 2016

ip-static-94-242-236-45.as5577.net
February 9, 2016

ip-static-94-242-227-207.as5577.net
February 9, 2016

ip-static-94-242-227-179.as5577.net
February 9, 2016

ip-static-94-242-227-163.as5577.net
February 9, 2016

ip-static-94-242-227-159.as5577.net
February 9, 2016

ip-static-94-242-227-151.as5577.net
February 9, 2016

ip-static-94-242-227-143.as5577.net
February 9, 2016

ip-static-94-242-227-135.as5577.net
February 9, 2016

ip-static-94-242-236-69.as5577.net
February 9, 2016

File downloads found at URLs served by fileshare7090.depositfiles.org.

The following 5 files have been seen to comunicate with fileshare7090.depositfiles.org in live environments.

URL:
http://fileshare7090.depositfiles.org/

Title:
“DepositFiles”

Description:
“DepositFiles provides you with a legitimate technical solution, which enables you to upload, store, access and download text, software, scripts, images, sounds, videos, animations and any other materials in form of one or several electronic fil...”

Web server:
nginx