Help RSS API Feed Maltego Contact                        

Domain > bas.bg

Welcome! Right click nodes and scroll the mouse to navigate the graph.
More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to bas.bg
MD5A/V
7abb1e7e80e0f342f0452ae91375fce3
47e649bde7c0d7262d3333d4036954b1[HW32.CDB.854d] [Backdoor.Hlux.r3] [Trojan.Win32.Kryptik.cxchjm] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dlqp] [Backdoor.Hlux!j6RuLW3VWhk] [Trojan.Win32.S.PSW-Tepfer.829456.BB] [UnclassifiedMalware] [Trojan.Packed.26558] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[Backdoor]/Win32.Hlux] [Trojan/Win32.Tepfer] [W32/Trojan.TIAQ-7840] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [Crypt3.LHH] [Trojan.Win32.Kryptik.CASU] [Win32/Trojan.337]
7b34d19bfbc7f1b735f825de01b281f8
29bc940ee9a3eac0149ed07dd5753710[W32.AndromPlwbahC.Trojan] [TrojanDownloader.Cutwail.r3] [Trojan.Injector!WWqNbSPGUtU] [Backdoor.Trojan] [Cutwail.DCN] [TROJ_SPNV.01KP14] [Trojan.Win32.Cutwail.fal] [Win32.Trojan.Cutwail.Htmq] [UnclassifiedMalware] [BackDoor.Andromeda.559] [BehavesLike.Win32.Dropper.nh] [Troj/MSIL-AZF] [W32/Backdoor.DYFX-3160] [Trojan/Win32.Cutwail] [TrojanDownloader:Win32/Cutwail] [RDN/Spybot.bfr!o] [TScope.Trojan.MSIL] [Trj/Chgt.N] [Trojan.Win32.Cutwail] [MSIL/GLQ!tr] [MSIL5.BVOW] [Trojan.Win32.Cutwail.ATJx]
33ab377af13de182c8cb5de46e60a5af
548ed1c75d8e9419f3cecc0f5dcfa218[Trojan.Inject.IA] [Patched] [Trojan.DownLoad.64914] [Win32/Wigon.PI] [W32/Cutwail.DPV!tr] [Trojan.Win32.Cutwail.dpv] [Trojan.Cutwail]
733646a3a3b2286c267a94ba76fc15e1[Trojan.Inject.IA] [Patched] [Trojan.DownLoad.64914] [Win32/Wigon.PI] [Trojan.Win32.Cutwail.dpv] [Trojan.Cutwail]
90ba8b4cd89a5fd23bb0c3f17a759ba5[Trojan.Inject.r3] [Trojan.Injector!xSxmY/oTY4I] [Trojan.Win32.Inject.tfmg] [Trojan.Win32.Inject.dhtgak] [Win32.Trojan.Inject.Hssg] [UnclassifiedMalware] [Trojan.DownLoad.64914] [Trojan.Inject.Win32.108354] [BehavesLike.Win32.Dropper.nh] [Troj/Msil-ANY] [W32/Trojan.GRSK-5893] [Trojan/Win32.Inject] [TrojanDownloader:Win32/Cutwail] [Win-Trojan/MDA.630F094C] [RDN/Spybot.bfr!o] [Trojan.Inject] [Trj/Chgt.J] [Evilware.Outbreak] [W32/Inject.TFMG!tr] [MSIL5.APAS] [Trojan.Win32.Inject.aJp] [Win32/Trojan.9d7]
87209bcb0e0f2f07ebb713c73591a293[Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan/Wigon.pi] [Trojan.Inject.IA] [Trojan.Win32.DownLoad.dnpdpk] [New] [Suspicious.Cloud.5] [Trojan.Win32.Cutwail.dpv] [Trojan.Wigon!ntSxypTAolk] [Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan.DownLoad.64914] [Trojan.PornDialer.Win32.2002] [Patched] [Trojan/Cutwail.if] [W32/Cutwail.NLQ!tr] [Win32.Troj.Cutwail.d.(kcloud)] [Trojan.Inject.IA] [Backdoor/Win32.Pushdo] [Trojan.Inject.IA] [Trojan.Cutwail] [Trojan.Inject.IA]

DNS Resolutions
DateIP Address
2014-05-30213.191.199.2 (ClassC)
2023-11-09213.191.199.4 (ClassC)
2024-11-14213.191.221.71 (ClassC)

Port 80

Subdomains
DateDomainIP
ns1.bas.bg2024-09-07195.96.224.7
ns2.bas.bg2024-09-07213.191.199.7
space.bas.bg2024-09-07195.96.250.194
mail.space.bas.bg2014-05-30195.96.250.194
math.bas.bg2014-05-23213.191.194.11
exchange.math.bas.bg2014-05-23213.191.194.10
srv.orgchm.bas.bg2014-05-30195.96.228.5
argo.bas.bg2024-09-07195.96.224.7
ims.bas.bg2014-05-30213.191.222.2
mail.ims.bas.bg2024-05-2285.14.44.21
nlcv.bas.bg2014-09-02195.96.248.1
www.bas.bg2023-08-18213.191.199.4
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information