Domain > 24stat.ru

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to 24stat.ru

MD5	A/V
EED6D0908A6ED6D54AB18F1E7EA418A3
c71b12244ff728b57731381193e62cc3	[Worm*Win32/Verst.A] [Win32/Heur] [W32/Autorun.worm.bcf] [Win.Worm.Palevo-3534]
f2826d8c314b6f4a055527f5dcc731dd	[Worm*Win32/Verst.A] [Win32/Heur] [W32/Autorun.worm.bcf] [Worm.Autorun-9885] [WORM/Autorun.cchs]
70854fb3717d8e692a4a79c347a91021	[Win32/FakeFLDR_i] [Worm.Verst.A] [Trojan.PWS.OSMP.17] [Win32/Kryptik.BTFN] [W32/Kryptik.ANS!tr] [Luhe.Fiha.E] [Trojan.Win32.DNSChanger] [Trojan.Dropper] [W32/Autorun.worm.bcf] [Worm*Win32/Verst.A] [Worm.Win32.Verst.a] [Mal/EncPk-MX] [WORM_VERST.SM] [Worm.Autorun.01133]
748CE51A192DE6215D386DC8CBA2318F
182f08870c22e4f41b20bc0c72040e63	[Worm*Win32/Verst.A] [Win32/Heur] [W32/Autorun.worm.bcf] [Worm.Autorun-9885] [WORM/Autorun.cchs]
f1d3312e87b81e57acb211e9cb06348a	[W32/Sality.Q] [Win32/Sality] [W32.Sality.Q-1] [W32/Autorun.worm.bcf] [Virus*Win32/Sality.R]
e2f6464abdba14d2ceb66916affd070d	[Win32/Sality] [W32.Sality] [W32/Autorun.worm.bcf] [W32/Sality.s] [Virus*Win32/Sality.T]
f5ad6be82ab101e2a1e92bb21884a2f8	[Worm*Win32/Verst.A] [Win32/Heur] [W32/Autorun.worm.bcf] [Win.Worm.Palevo-3534]
af63eaf76efd27aa88e89b60805bd311	[Win32/Virut] [Worm*Win32/Verst.A] [W32/Autorun.worm.bcf] [Worm.Autorun-9885]
fcf22c940acb461bd66964021f47c0f3	[Virus*Win32/Sality.R] [W32.Sality-7]
0325a73bdd931bb9efb6491f43401a2e	[P2P.Worm.Palevo.dbuk] [W32/Backdoor.YNLM-3278] [Worm/Verst.A.51] [Win32/Verst.C] [Worm.Verst.A] [BackDoor.Pushnik.19] [W32/Kryptik.ANS!tr] [Win32/Heur] [P2P-Worm.Win32.Palevo] [P2P-Worm.Win32.Palevo.dbuk] [Trojan.Dropper] [W32/Autorun.worm.bcf] [Worm*Win32/Verst] [Worm.Win32.Verst.a] [Mal/EncPk-MX] [W32.SillyDC] [WORM_VERST.SM] [Worm.Autorun.01133]
00d75b02a237e896e653b5108cc730c5	[Win32/FakeFLDR_i] [Worm.Verst.A] [Worm.Autorun-9885] [BackDoor.Pushnik.15] [W32/Kryptik.ANS!tr] [Win32/Heur] [Trojan.Win32.Ransom] [Trojan.Dropper] [W32/Autorun.worm.bcf] [Worm*Win32/Verst.A] [Worm.Win32.Verst.a] [Mal/EncPk-MX] [WORM_VERST.SM] [Worm.Autorun.01133]
4232e3caeadc90389c60606114fa1f45	[Win32/Sality] [W32/Sality.S] [W32.Sality] [W32/Autorun.worm.bcf] [Virus*Win32/Sality.T]
81FD7838BBF7AB58F3F597D339F07C72
356ecfafdd92784b2054d3d42656de84	[Win32/FakeFLDR_i] [Win.Worm.Palevo-3534] [BackDoor.Pushnik.21] [W32/Kryptik.ANS!tr] [Win32/Heur] [P2P-Worm.Win32.Palevo] [Trojan.Dropper] [W32/Autorun.worm.bcf] [Worm*Win32/Verst.A] [Worm.Win32.Verst.a] [Mal/EncPk-MX] [WORM_VERST.SM] [Worm.Autorun.01133] [Worm.Palevo.Win32.43424]
48729aec7fdc71706f6c30981c7f3589	[Win32/Heur] [W32/Autorun.worm.bcf] [Worm.Autorun-9885]
15d1f21dbfc9b71f285f591bebfbfe73	[Virus*Win32/Sality.L] [Win32/Sality] [W32/Autorun.worm.bcf] [W32.Sality.O] [W32/Sality.o]
20ef4e0c7da7b1bca5677b33d4028972	[Win32/Heur] [W32/Autorun.worm.bcf] [Worm.Autorun-9885]
e80d8cb1f11c94725b897e5231772ea3	[Worm*Win32/Verst.A] [Win32/Heur] [W32/Autorun.worm.bcf] [Worm.Palevo-26821]

DNS Resolutions

Date	IP Address
2012-03-16	81.177.26.77 (ClassC)
2013-06-11	46.17.40.108 (ClassC)
2013-07-15	184.82.27.203 (ClassC)
2013-08-09	184.82.222.125 (ClassC)
2013-08-17	184.82.27.165 (ClassC)
2013-10-21	184.82.27.165 (ClassC)
2014-03-05	37.1.194.43 (ClassC)
2014-03-09	37.1.194.43 (ClassC)
2014-06-13	148.251.23.164 (ClassC)
2014-06-13	148.251.23.164 (ClassC)
2014-12-09	148.251.36.54 (ClassC)
2019-03-16	194.58.56.99 (ClassC)
2024-03-12	148.251.36.54 (ClassC)
2024-04-05	194.67.71.99 (ClassC)
2024-09-03	91.226.31.93 (ClassC)
2024-10-04	91.226.31.82 (ClassC)
2026-02-10	91.226.30.3 (ClassC)

Port 80

Subdomains

Date	Domain	IP
guard.24stat.ru	2024-09-09	91.226.31.93
stomach.barrel.24stat.ru	2025-12-08	91.226.30.3
astonish.owl.24stat.ru	2024-09-17	91.226.31.93
seo.24stat.ru	2024-09-07	91.226.31.93
www.seo.24stat.ru	2024-08-09	91.226.31.93
www.24stat.ru	2026-01-06	91.226.30.3
greatly.24stat.ru	2024-08-19	91.226.31.93

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]