www.brothersoft.fr

GANDI ROLE

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
GANDI

Server location:
Texas, United States (US)

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.

Root domain:

Scanner detections:
Malware distribution  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.KORAMGAMESLIMITED.p, PUP.Optional.KORAMGAMESLIMITED.M, PUP.Optional.KORAMGAMESLIMITED.b, PUP.Optional.KORAMGAMESLIMITED.r, PUP.Optional.Installer, Win32.Generic
100.00%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4786140, Threat.4150696, Brothersoft Downloader
23.08%

Malwarebytes
PUP.Optional.BSDownloader
15.38%

K7 AntiVirus
Riskware , Unwanted-Program
15.38%

F-Prot
W32/Agent.TR.gen
15.38%

ESET NOD32
Win32/BSDownloader (variant), Win32/InstallCore.PQ (variant)
15.38%

Agnitum Outpost
Riskware.BSDownloader, PUA.InstallCore
15.38%

AVG
Downloader, Generic, Potentially harmful program Downloader.ATN
15.38%

Commtouch SDK
W32/Agent.TR.gen!Eldorado
11.54%

NANO AntiVirus
Riskware.Win32.BrotherSoft.cvlwba, Riskware.Win32.InstallCore.dotkkf
11.54%

Antiy Labs AVL
Trojan/Win32.Tgenic
11.54%

Dr.Web
Adware.InstallCore.433, riskware program Program.BrotherSoft.18, Trojan.InstallCore.38
11.54%

K7 Gateway Antivirus
Unwanted-Program , Trojan
11.54%

herdProtect (fuzzy)
a variant of 22314e62f9f0bd9bf32d0b6bf775824760790639, a variant of 5ac76d8ea2bd0ff694f635544005dcf5b60952ac
7.69%

Avira AntiVirus
Adware/InstallCore.A.416, PUA/Installco.zlf
7.69%

The domain www.brothersoft.fr has been seen to resolve to the following IP address.

108.168.197.129-static.reverse.softlayer.com
December 28, 2013

File downloads found at URLs served by www.brothersoft.fr.

1 / 68      (Malware)
http://www.brothersoft.fr/soft-126620.download  (brothersoft_downloader_for__torrent.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-126620.download  (installer_for__torrent.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-133627.download  (installer_for_autoclick.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-138934.download  (installer_for_gta_san_andreas.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-132601.download  (brothersoft_downloader_for_convertxtodvd.exe)

1 / 68      (Malware)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-162201.download  (installer_for_harry_potter_sorcerer_s_stone.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-131684.download  (installer_for_acid_pro.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-140321.download  (brothersoft_downloader_for_pdf_to_dwg.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-138853.download  (brothersoft_downloader_for_internet_download_manager.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-164269.download  (installer_for_twilight_saga_1_7.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-147635.download  (brothersoft_downloader_for_wauw_photo_widget.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-136168.download  (brothersoft_downloader_for_ip_anonymizer.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-165919.download  (brothersoft_downloader_for_one_piece_pics_1000_.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-142125.download  (brothersoft_downloader_for_videopad.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-133479.download  (brothersoft_downloader_for_thinkgraph.exe)

0 / 68

1 / 68      (Malware)
http://www.brothersoft.fr/soft-166219.download  (brothersoft_downloader_for_color_fx_splash_color.exe)

1 / 68      (Malware)
http://www.brothersoft.fr/soft-102355.download  (brothersoft_downloader_for_registry_first_aid.exe)

12 / 68    (PUP)
http://www.brothersoft.fr/soft-143610.download  (brothersoft_downloader_for_meteo.exe)

10 / 68    (PUP)
http://www.brothersoft.fr/soft-138343.download  (brothersoft_downloader_for_av_voice_changer_software_gold.exe)

12 / 68    (PUP)
http://www.brothersoft.fr/soft-138404.download  (brothersoft_downloader_for_tibia_multi_ip_changer.exe)

9 / 68      (PUP)
http://www.brothersoft.fr/soft-134472.download  (brothersoft_downloader_for_winrar.exe)

10 / 68    (PUP)

11 / 68    (PUP)
http://www.brothersoft.fr/soft-143320.download  (brothersoft_downloader_for_super_bluetooth_hack.exe)

The following 17 files have been seen to comunicate with www.brothersoft.fr in live environments.

URL:
http://www.brothersoft.fr/

Google Analytics:
UA-218645

Title:
“Télécharger des programmes, Software, Freeware, Jeux Gratuitement en Français, Complète Version”

Description:
“Télécharger des programmes gratuitement, software, freeware, jeux en Français, Complète Version”

Web server:
Apache