Domain > cryfreeman042.ddns.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to cryfreeman042.ddns.net

MD5	A/V
37e4b40648f6c34df59dd9f81a9e9936	[Exp.RTF.Shellcode.CV] [Trojan.Mdropper] [Exploit.Rtf.116] [HEUR_RTFMALFORME] [Exploit-CVE2012-0158!e] [Exploit-CVE2012-0158!e] [Exploit_c.ACRC] [virus.exp.20120158]
2584e512d0cdd4267c102fccfbe7cf34	[Exploit.CVE-2012-0158.Heur] [Exp.RTF.CVE-2012-0158] [Exploit-CVE2012-0158.g] [CVE120158] [Exploit.Win32.CVE-2012-0158.j] [Exploit:W32/CVE-2012-0158.H] [HEUR_RTFMALFORME] [Exploit-CVE2012-0158.g] [Troj/DocDrop-DM] [CVE120158] [Exploit.CVE-2012-0158.a] [EXP/CVE-2012-0158] [RTF/Cve-2012-0158] [Win32/Exploit.CVE-2012-0158.NE] [Trojan.Win32.Exploit] [PossibleThreat.P0] [Exploit_c.ACAM] [virus.exp.20120158]
eacce7fb70e6ba27bf83b75ea8b4aaae	[Exploit.CVE-2012-0158.AS] [Exploit/W32.CVE-2012-0158.ACC] [Exploit.CVE-2012-0158.AS] [Exploit.CVE-2012-0158.AS] [Trojan.Mdropper] [TROJ_FRS.0NA003GR15] [Exploit.CVE-2012-0158.AS] [Exploit.CVE-2012-0158.AS] [Troj/DocDrop-DT] [Exploit.CVE-2012-0158.AS] [Exploit.CVE-2014-1761.12] [Downloader.OpenConnection.JS.127655] [TROJ_FRS.0NA003GR15] [Exploit-CVE2012-0158] [EXP/CVE-2010-3926.jhg] [Exploit.CVE-2012-0158.AS] [RTF/Cve-2012-0158] [TrojanDownloader:Win32/Retefe.E] [Exploit-CVE2012-0158] [Trojan.Win32.Exploit] [virus.exp.20120158]
b61d31b8c4382826536fe18c44dfcb6b	[Exploit.CVE-2012-0158.AS] [Exploit/W32.CVE-2012-0158.ACC] [Exploit-CVE2012-0158] [Trojan.Mdropper] [TROJ_ARTIEF.YMNJB] [Exploit.CVE-2012-0158.AS] [Exploit.CVE-2012-0158.AS] [Exploit.CVE-2012-0158.AS] [Exploit.CVE-2012-0158.AS] [Exploit.CVE-2014-1761.12] [Downloader.OpenConnection.JS.127655] [TROJ_ARTIEF.YMNJB] [Exploit-CVE2012-0158] [Troj/DocDrop-DT] [Exploit.CVE-2012-0158.AS] [TrojanDownloader:Win32/Retefe.E] [RTF/Cve-2012-0158] [Exploit.CVE-2012-0158.AS] [Trojan.Win32.Exploit] [PossibleThreat.P0] [virus.exp.20120158]
aa4887e869f08dc8083a43e0f577f9f3	[MSIL/Dino.89AA!tr]
88542c5aa1a2a8ee52222892a7806f6d
27b3f0572c2ae0b4009a60994e5184c2
3e9ba1b84d4c721f3c2442b8b87eff24
29a6184d57465c73aecec20840e0fc1f
094f4d027ece119f56ddb337b43377ae	[HW32.Packed.CEB0] [PE:Malware.RDM.08!5.E[F1]] [BehavesLike.Win32.PWSZbot.jc] [Win32.Trojan.Inject.Auto]
74efb396814a1840d88997e6aaec9253
fc9bb6fc751f53cf1d6b8a0678934b78	[Artemis!FC9BB6FC751F] [Suspicious.Cloud.5] [PE:Malware.RDM.08!5.E[F1]] [Artemis] [MSIL/Injector.MGW!tr] [Win32.Trojan.Bp-qqthief.Iqpl] [Trojan.MSIL.Injector] [MSIL9.PXO] [Trojan.MSIL.Injector.MHD]
5ade7755a9752c2d704cf18cb0dd0153	[HW32.Packed.5893] [SAPE.Heur.9C037] [Win32.Trojan.Bp-qqthief.Iqpl]

Whois

Property	Value
Name	Domain Operations No-IP.com
Organization	Vitalwerks Internet Solutions, LLC
Email	domains@no-ip.com
Address	425 Maestro Dr. Second Floor
Zip Code	89511
City	Reno
State	NV
Country	US
Phone	+1.17758531883
NameServer	nf1.no-ip.com
Created	2001-06-28 06:00:00
Changed	2014-08-14 06:00:00
Expires	2019-06-28 00:00:00
Registrar	TLDS LLC. d/b/a SRSP