Domain > 24u4jf7s4regu6hn.tor2web.org

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to 24u4jf7s4regu6hn.tor2web.org

MD5	A/V
84a39414a2372d183c31708f6cb46d5c	[Trojan.Kovter] [Trojan.Cryptolocker.E] [Trojan-Ransom.Win32.Bitman.mq] [Trojan.Bitman!] [Trojan[Ransom]/Win32.Bitman] [Ransom:Win32/Tescrypt.A] [Trojan/Win32.Ransom] [Trj/RansomCrypt.C] [Trojan.Win32.Crypt] [W32/Kryptik.DIBW!tr] [Crypt4.AFNM] [Trojan.Win32.Ransom.mq]
57c4e64c33ffe882a63828a9959e1140	[Ransom-Tescrypt!57C4E64C33FF] [Trojan.CryptoLocker] [Trojan.Cryptolocker.E] [Trojan-Ransom.Win32.Bitman.mj] [Trojan.AVKill.36885] [BehavesLike.Win32.PWSZbot.fh] [TR/Dropper.A.38344] [Trojan:Win32/Dynamer!ac] [Trojan.Win32.Ransom.mj] [W32/Kryptik.DHVM!tr] [Crypt4.AELD] [Trj/RansomCrypt.C] [Win32/Trojan.Multi.daf] [Adware.Win32.iBryte.DHVM]
1354ac74c17917358a7153fe7dd9eaad	[Trojan.Ransom.FileCryptor] [Trojan-Ransom.Win32.Bitman.mx] [Win32.Trojan.Bp-ransomware.Ejqz] [BehavesLike.Win32.PWSZbot.hm] [TR/FileCoder.A.26] [Ransom:Win32/Tescrypt.A] [Trj/Chgt.O] [Inject2.CDAG]
c46da19af93ec812a7c285a1b1338f95
36095572717aee2399b6bdacef936e22	[Trojan.CryptoLocker] [Trojan[Ransom]/Win32.Bitman] [Artemis!36095572717A] [Win32/Filecoder.ER] [Trojan.Bitman!] [Trojan.Cryptolocker.E] [Trojan-Ransom.Win32.Bitman.lt] [Trojan.Win32.A.Bitman.265728[h]] [W32/Trojan.HSUB-7359] [Ransom:Win32/Tescrypt.A] [Trojan/Win32.Ransom] [Trojan.Win32.Filecoder] [W32/Bitman.ER!tr] [FileCryptor.BMM] [Trojan.Win32.Filecoder.ER]
b67759744af4fc76fda8b8d2d824c4c2	[HW32.Packed.56DB] [Trojan.D.r5] [Trojan.FakeMS.ED] [Trojan.Win32.Deshacop.drqdue] [Trojan.Cryptolocker.E] [TROJ_CRYPTESLA.AL] [Trojan.Win32.Deshacop.eo] [Trojan.Deshacop!] [Trojan.Inject.64625] [TR/Crypt.Xpack.201891] [Trojan/Win32.Deshacop] [Ransom:Win32/Tescrypt.A] [Trj/Chgt.O] [Win32/Filecoder.ER] [Win32.Trojan.Bp-ransomware.Ejqz] [Trojan.Win32.Filecoder] [W32/Deshacop.EO!tr] [FileCryptor.BNT] [Win32/Trojan.7f6]
8b207494dab106168f8d48e4c1e70b0f	[BehavesLike.Win32.PWSZbot.fc] [Trojan/Win32.Ransom] [Trj/RansomCrypt.C] [Trojan.Cryptolocker.E] [TROJ_CRYPALPHA.PF] [Trojan-Ransom.Win32.Bitman.mf] [TR/Changeling.A.4837] [Ransom-Tescrypt!8B207494DAB1] [Win32/Filecoder.ER] [W32/Filecoder.ER!tr] [FileCryptor.BNF] [Trojan.Win32.Ransom.mf] [Trojan:Win32/Dynamer!ac]
7798b95852f4ba2f0f1e74b9e38e2ac5	[Trojan.CryptoLocker] [Trojan-Ransom.Win32.Bitman.mo] [PE:Malware.XPACK-HIE/Heur!1.9C48] [BehavesLike.Win32.Downloader.fc] [Troj/EccKrypt-I] [TR/Crypt.ZPACK.153718] [Ransom:Win32/Tescrypt.A] [Trojan/Win32.Ransomlock] [Trojan.Win32.Filecoder.ER] [Win32/Filecoder.ER] [Trojan.Win32.Filecoder] [W32/Filecoder.ER!tr] [FileCryptor.BNW] [Trj/Chgt.O]
e889c7092f94971e4153054ad4885edb	[Trojan.CryptoLocker] [Trojan-Ransom.Win32.Bitman.my] [BehavesLike.Win32.PWSZbot.hm] [Artemis!E889C7092F94] [Trojan.Win32.Injector.CANT] [Trojan.TeslaCrypt] [Inject2.CDCK]
91370d1828798f9ac3526f44f8308f0c	[Trojan.Kovter] [Trojan.Bitman!] [Trojan-Ransom.Win32.Bitman.mq] [Artemis] [Ransom:Win32/Tescrypt.A] [Artemis!91370D182879] [Trj/RansomCrypt.C] [W32/Bitman.DIBW!tr] [Crypt4.AFNM] [Adware.Win32.iBryte.DIBW] [Win32/Trojan.9bd]
58e1e0b122490dd5bf4a81776772b33c
12f2e326ea089ecdf92902c7132448c9	[Trojan-Spy.Win32.Zbot.ilw] [TR/Crypt.ZPACK.151361] [Trojan/Win32.Neurevt] [Artemis!12F2E326EA08] [W32/CADV!tr] [Inject2.CCHG]
8dcf5eb3ef93462679fd4e65ec52c9f2
7b0c9abcadecc1b1b5707960c28fbe1f	[Ransom-Tescrypt!7B0C9ABCADEC] [Trojan-Ransom.Win32.Bitman.mf] [BehavesLike.Win32.PWSZbot.fc] [TR/Changeling.A.4837] [Trojan/Win32.Ransom] [Win32/Filecoder.ER] [W32/Filecoder.ER!tr] [FileCryptor.BNF] [Trj/RansomCrypt.C]
59bb43ab2239baf5721807ec606d5397	[Win32.Trojan.Bp-ransomware.Ejqz] [Trojan.CryptoLocker] [Win32/Filecoder.EM] [Trojan-Ransom.Win32.Bitman.mw] [Troj/Ransom-AUM] [Trj/Chgt.O] [Inject2.CCYS]
17a8119f8a6c17937bc2f9549b7e2e42	[Trojan[Ransom]/Win32.Bitman]
9656e6027efb223e76981533c2ef30c3	[Trojan.Ransom.TeslaCrypt] [Trojan.CryptoLocker] [Trojan.Bitman!] [Trojan.Cryptolocker.N] [Trojan-Ransom.Win32.Bitman.mh] [Win32.Trojan.Bp-ransomware.Ejqz] [Trojan.AVKill.36885] [BehavesLike.Win32.PWSZbot.fh] [TR/Dropper.A.38344] [Trojan[Ransom]/Win32.Bitman] [Ransom:Win32/Tescrypt.A] [Ransom-Tescrypt!9656E6027EFB] [Trojan.Win32.Ransom.mh] [Trojan.Win32.Crypt] [W32/Bitman.DHVM!tr] [Crypt4.AELD] [Trj/RansomCrypt.C]
d3399d3f2c56a97d0b8c53de9c375f4e
3e3579b464f6ce468739b612056a3c4d	[Trojan-Ransom.Win32.Bitman.lz] [Trojan.Win32.A.Bitman.353792[h]] [TR/Dropper.A.38332] [Win32.Trojan.Bp-ransomware.Ejqz]
8f7f2969027a24defdc07161e9b8d6ca	[Trojan-Ransom.Win32.Bitman.lz] [TR/Dropper.A.38332] [Trojan/Win32.Ransom] [Artemis!8F7F2969027A] [Win32.Trojan.Bp-ransomware.Ejqz] [Trojan.Win32.Ransom.lz]

Whois

Property	Value
Name	Virgil Griffith
Email	59ccf6a4d4ed6d960dd23cde3402293b-960908@contact.gandi.net
Zip Code	75013
City	Paris
Country	FR
Phone	+33.170377666
Fax	+33.143730576
NameServer	b.dns.gandi.net
Created	2008-11-05 00:22:31
Changed	2014-10-21 01:54:10
Expires	2015-11-05 00:22:31
Registrar	Gandi SAS (R42-LROR)