Domain > 3fdzgtam4qk625n6.tor2web.blutmagie.de

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

http://www.threatgeek.com/2016/07/tracking-man1-cr...

Files that talk to 3fdzgtam4qk625n6.tor2web.blutmagie.de

MD5	A/V
ba3bb01790effb22a5c4f4259271bbdd	[TrojanRansom.Critoni.r3] [RDN/Ransom!ex] [Trojan.MSIL.Injector] [Trojan.Cryptolocker.E] [TROJ_CRYPCTB.YVN] [Trojan.Win32.Encoder.dquela] [Trojan.Encoder.858] [W32/Trojan.BMBN-6323] [TR/Dropper.MSIL.147471] [Ransom:Win32/Critoni.B] [Trojan/Win32.CTBLocker] [Adware.MSIL.iBryte.BSO] [W32/JEO.YVN!tr] [MSIL7.BSZI]
b5b6aa8ae13ee6a7f0094bd75a25780e	[HW32.Packed.51B6] [Ransom.Citroni.A4] [Trojan.Ransom.CTBLocker] [Trojan.Win32.Onion.dqqefj] [Trojan.Cryptolocker.E] [TROJ_CRYPCTB.IC] [Trojan-Ransom.Win32.Onion.vic] [Trojan.Win32.CTB-Locker.976384[h]] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.Encoder.858] [Win32.Malware!Drop] [BehavesLike.Win32.Dropper.dc] [W32/Trojan.TVIM-6742] [TR/Crypt.ZPACK.138640] [Trojan[Ransom]/Win32.Onion] [Ransom:Win32/Critoni] [BScope.Malware-Cryptor.Crytroni] [Trj/RansomCrypt.A] [Trojan.Win32.Crypt] [Inject2.BYKO] [Trojan.Win32.Ransom.vic] [Trojan/Win32.CTBLocker]
3ce11c15f9e1be0a1d36688836386240	[HW32.Packed.E3E4] [Ransom.CTBlocker.r5] [Trojan.Ransom.CTBLocker] [WS.Reputation.1] [Trojan.Win32.CTB-Locker.916992[h]] [Win32.Trojan.Ctb-locker.Auto] [Trojan.Encoder.858] [Win32.Troj.Advert.ac.(kcloud)] [Ransom:Win32/Critroni.B] [Win-Trojan/Ransomware.916992] [RDN/Ransom!ex] [Win32/Filecoder.DA] [Trojan.Win32.Filecoder] [FileCryptor.BHZ] [Trojan.Win32.Filecoder.DA]
3f2437bd0566878bf85b56ca77b13f2a
6e68d99b75d32033b895b7aff4a36746	[Ransom.Citroni.WR5] [Trojan.Ransom.CTBLocker] [Trojan.MalPack] [Trojan.Filecoder!ZPtSZ7XYzNY] [TROJ_CRYPCTB.CD] [Trojan.Win32.Xpack.drdmux] [Trojan.Win32.CTB-Locker.820224[h]] [Ransom-O] [W32/Ransom.YAHY-3463] [TR/Crypt.Xpack.187300] [Ransom:Win32/Critroni.B] [Trojan/Win32.CTBLocker] [Win32/Filecoder.DA] [Trojan.Crypt.XPACK] [W32/CRYPCTB.CD!tr] [Inject2.CASW] [Trojan.Win32.Filecoder.DA] [HW32.Packed.48C3]
3f6587c5803a4a33157bde56256292a1	[HW32.Packed.425B] [Crypt4.WDF] [Adware.Win32.iBryte.DGLQ] [Artemis!3F6587C5803A] [Trojan.Cryptolocker.E] [TROJ_FRS.0NA000DS15] [Win32.Trojan.Crypt.Lmuv] [Ransom:Win32/Critroni.B] [Adware.Win32.iBryte.DGNC] [Trj/RansomCrypt.C]
eef89c15b2625a8614d8c898fb802e04	[Trojan.Downloader.CryptoLocker.F] [Trojan.Ransom.Dalexis.G] [Trojan.Win32.Krap.2!O] [Trojan.Downloader.CryptoLocker.F] [Trojan.Ransom.TR] [W32/Trojan3.NOY] [Elenoocka.AE] [Trojan.Win32.Yakes.iyvv] [Trojan.Downloader.CryptoLocker.F] [Trojan.Win32.Downloader.48128.DT[h]] [Trojan.Downloader.CryptoLocker.F] [Trojan.Downloader.CryptoLocker.F] [Trojan.DownLoader12.18214] [Trojan-Downloader.Win32.Dalexis] [BehavesLike.Win32.PWSZbot.ph] [W32/Trojan.WGFQ-2226] [Trojan[Downloader]/Win32.Cabby] [TrojanDownloader:Win32/Dalexis.D] [Win-Trojan/Ctblocker.44544] [Trojan.Downloader.CryptoLocker.F] [Ransom-CTB] [Trojan-Downloader.Win32.Dalexis] [Trojan.Win32.Yakes.iyvv] [Trojan.Win32.Crypt] [W32/Kryptik.CWXI!tr] [Crypt3.BYRG] [Trj/RansomCrypt.B]
39c0e005cd2892a7b315081f9db6dc37

Whois

Property	Value
Email	hostmaster@telefonica.de
NameServer	ns-3.mediaways.net
Changed	2007-07-31 12:46:08