home

www.auto-sleepy-files-hurricane2.net

admin d

Domain Information

The domain www.auto-sleepy-files-hurricane2.net registered by admin d was initially registered in March of 2015 through GANDI SAS. Currently this domain has been known to host various forms of malware. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GANDI SAS

Server location:
Oregon, United States (US)

Create date:
Monday, March 23, 2015

Expires date:
Thursday, March 23, 2017

Updated date:
Thursday, March 24, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
auto-sleepy-files-hurricane2.net

Whois:
2 auto-sleepy-files-hurricane2.net records

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

Emsisoft Anti-Malware
Gen:Variant.Mikey.11159, Gen:Variant.Application.Bundler.Amonetize.26
38.46%

MicroWorld eScan
Gen:Variant.Mikey.11159, Gen:Variant.Application.Bundler.Amonetize.26
38.46%

Bitdefender
Gen:Variant.Mikey.11159, Gen:Variant.Application.Bundler.Amonetize.26
38.46%

G Data
Gen:Variant.Mikey.11159, Gen:Variant.Application.Bundler.Amonetize.26
38.46%

AhnLab V3 Security
PUP/Win32.Amonetiz, PUP/Win32.Amonetize
38.46%

Bkav FE
HW32.Packed
30.77%

Baidu Antivirus
PUA.Win32.Amonetize
30.77%

Lavasoft Ad-Aware
Gen:Variant.Mikey.11159, Gen:Variant.Application.Bundler.Amonetize.26
30.77%

Kaspersky
UDS:DangerousObject.Multi.Generic, not-a-virus:AdWare.Win32.Amonetize
30.77%

Agnitum Outpost
PUA.Amonetize
30.77%

Sophos
Generic PUA GC, Generic PUA NG, Generic PUA DD, Generic PUA CH
30.77%

Dr.Web
Trojan.Amonetize.2248, Trojan.Fakealert.48275
30.77%

ESET NOD32
Win32/Amonetize.EF potentially unwanted (variant)
23.08%

F-Secure
Gen:Variant.Mikey.11159, Riskware.Gen:Variant.Application.Bundler
23.08%

The domain www.auto-sleepy-files-hurricane2.net has been seen to resolve to the following 2 IP addresses.

54.245.242.253
ec2-54-245-242-253.us-west-2.compute.amazonaws.com
May 5, 2015

54.244.90.176
ec2-54-244-90-176.us-west-2.compute.amazonaws.com
May 5, 2015

File downloads found at URLs served by www.auto-sleepy-files-hurricane2.net.

1 / 68      (Malware)
http://www.auto-sleepy-files-hurricane2.net/.../Game Ringan Balapan Liar di Kota City Racing__9883_il33987.exe  (e83c6954b2ab852ef826e405c65adb2a)

1 / 68      (Malware)
http://www.auto-sleepy-files-hurricane2.net/.../setup.ultimatenaruto__9478_i1499381352_il25390.exe  (dfb74133e600d93ff1c31b5631bb2eba)

1 / 68      (Malware)
http://www.auto-sleepy-files-hurricane2.net/.../1.5.Flow.s.HD.128px..Eisregen..Edit.for....__12041_il953867.exe  (0a1a480a7dce08c0840a7309e65542f3)

1 / 68      (Malware)
http://www.auto-sleepy-files-hurricane2.net/.../Polar Si8000 Si9000 PCB Transmission Line Field Solver 6.1.0 7.1.0 ENG __11191_il731.exe  (5b274a9aab49e636b6d6ca85b5480332)

1 / 68      (Malware)
http://www.auto-sleepy-files-hurricane2.net/.../windowsxpsp3activatorrar.rar__10609_il212132.exe  (emergency 5 free download pc game__9011_i1492822125_il27228.exe)

1 / 68      (Malware)
http://www.auto-sleepy-files-hurricane2.net/.../GTA 5 PC Installer__9396_il1186.exe  (c6406bd3db92e2b6912d344aa60cb915)

1 / 68      (Malware)
http://www.auto-sleepy-files-hurricane2.net/.../DivX.Web.Player.Installer__8420_i1499381592_il51875.exe  (66182f269db3e70e96da3feea1ccb96b)

14 / 68    (PUP)
http://www.auto-sleepy-files-hurricane2.net/.../Download Game ( Permainan ) Onet 2 Untuk PC Terbaru 2015 Gratis__6629_i1493677874_il1317.exe  (00000000)

22 / 68    (PUP)
http://www.auto-sleepy-files-hurricane2.net/.../inSSIDer 4.0.0.20 for Windows Full Version (Serial Number)__3613_il3627.exe  (sam__2268_il41583.exe)

1 / 68      (Malware)
http://www.auto-sleepy-files-hurricane2.net/.../Setup Skate 3 Full Version PC by R.G V1.26__6431_il2949.exe  (ffb15d554b03baeb08d6b61948626b2f)

27 / 68    (PUP)
http://www.auto-sleepy-files-hurricane2.net/.../AddMeFast Bot__11498_il615734.exe  (a2cfeff367fe36e7660920cb95041bbd)

19 / 68    (PUP)
http://www.auto-sleepy-files-hurricane2.net/.../League Of Legends Hack v1.12__8585_il18487.exe  (013fba95bceb50fd56204e7ed7cbc37a)

21 / 68    (PUP)
http://www.auto-sleepy-files-hurricane2.net/.../iCloudKillerv2Setup__9660_il52476.exe  (adbb43ab803a8fdb3a61e1b5f0c52dd2)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.