Domain > directexe.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

http://vxvault.net/ViriList.php

http://www.clearskysec.com/dustysky/

https://otx.alienvault.com/pulse/568e917967db8c057...

https://otx.alienvault.com/pulse/56c374ab67db8c125...

Files that talk to directexe.com

MD5	A/V
7085040d4549e6917d049d1116bd2f23
11fe11b6d9b34a0bfe7c9d9349d224f2
1a5363e716d2d5b5df9acd76f74f079f	[WS.Reputation.1]
a3b126c0b20514a99ade679a5b169cfb
4e45b053f1e7136737e8f27c75328d51	[BehavesLike.Win32.Dropper.fc] [Trojan-Dropper.Small] [MSIL/Kryptik.CSK!tr]
b15d43fce325e043de385337afc4e480	[Exp.RTF.CVE-2012-0158] [Exploit-CVE2012-0158.g] [CVE120158] [Win32/Exploit.CVE-2012-0158.NE] [Exploit.Win32.CVE-2012-0158.j] [Exploit:W32/CVE-2012-0158.H] [Exploit.Rtf.CVE2012-0158] [HEUR_RTFMALFORME] [Exploit-CVE2012-0158.g] [Troj/DocDrop-DM] [CVE120158] [Exploit.CVE-2012-0158.a] [EXP/CVE-2012-0158] [RTF/Cve-2012-0158] [Win32.Trojan.Cve-2012-0158.Pcsj] [Exploit_c.ACAM] [virus.exp.20120158]
a95bec2563ff30d7e40855b67f592468	[O97M.Dropper.BR] [W97M/Downloader.ajk] [W97M.Downloader] [W97M/Downloader.ajk] [W97M/Downloader] [TrojanDownloader:O97M/Bartallex]
beaf24d5766b13c0481a386909bce859
8382df15b2a04b4b7763c31c3d46abea	[O97M.Dropper.BR] [W97M.Downloader]
b6713e226526c0f287cb808b23576fc0
b775ea1f9c3b3052d70ce1980e3460b1	[Exp.RTF.Shellcode.CV] [Exploit-CVE2012-0158!e] [Trojan.Mdropper] [TROJ_ARTIEF.YYUU] [Exploit.Rtf.116] [TROJ_ARTIEF.YYUU] [Exploit-CVE2012-0158!e] [Troj/20120158-A] [RTF/Cve-2012-0158] [Trojan.Win32.Exploit] [Exploit_c.ACRC] [virus.exp.20120158]
37e4b40648f6c34df59dd9f81a9e9936	[Exp.RTF.Shellcode.CV] [Trojan.Mdropper] [Exploit.Rtf.116] [HEUR_RTFMALFORME] [Exploit-CVE2012-0158!e] [Exploit-CVE2012-0158!e] [Exploit_c.ACRC] [virus.exp.20120158]
1b0258dc04b35b31606a738741d114a3	[Exp.RTF.Shellcode.CV] [Trojan.Mdropper] [Exploit.Rtf.116] [HEUR_RTFMALFORME] [Exploit-CVE2012-0158!e] [Exploit-CVE2012-0158!e] [Exploit_c.ACRC] [virus.exp.20120158]
18af8a66c5a802c626a48dd55f3169e5	[Exp.RTF.Shellcode.CV] [Exploit.Rtf.116] [HEUR_RTFMALFORME] [Exploit-CVE2012-0158!e] [Exploit-CVE2012-0158!e] [Exploit_c.ACRC] [virus.exp.20120158]
da319e8a5e1de7bde2b423230a3cb9a3	[W97M/Downloader.act] [Trojan.Script.MLW.dslepv] [W97M/Downloader.act] [Troj/DocDl-PU] [HEUR/Macro.Downloader] [HEUR.VBA.Trojan]
03dfaa7b38468e7f418e1edac766946f	[Troj/MSIL-DKN] [MSIL/Injector.KHX!tr]
803b3f4810df2dbe8942a551cbf1d30b
82b1c5d469192858721c0e37a9984b54	[Exp.RTF.CVE-2012-0158] [Exploit.Win32.CVE-2012-0158.j] [HEUR_RTFMALFORME] [virus.exp.20120158]
71dee6d0f612f2e898a981ceb4238ba9
7cca82bf2cbec6574a55fd64f5c911bb

Whois

Property	Value
Email	FE3D5B2F44BA46D2A486B2F3F7B3B0FE.PROTECT@WHOISGUARD.COM
NameServer	MAY.NS.CLOUDFLARE.COM
Created	2015-02-09 00:00:00
Changed	2015-02-17 00:00:00
Expires	2016-02-09 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2015-02-22	104.18.58.181 (ClassC)
2015-02-22	104.18.59.181 (ClassC)
2015-03-07	167.114.56.197 (ClassC)
2015-04-27	104.18.59.181 (ClassC)
2015-05-22	107.179.62.18 (ClassC)
2015-08-19	107.179.62.20 (ClassC)
2017-02-11	98.124.243.36 (ClassC)
2017-03-20	158.69.145.48 (ClassC)
2017-03-21	209.126.123.13 (ClassC)
2017-03-21	158.69.145.49 (ClassC)
2017-03-21	149.202.120.33 (ClassC)
2017-03-21	149.202.120.43 (ClassC)
2017-03-21	158.69.143.107 (ClassC)
2017-03-21	149.202.120.44 (ClassC)
2017-03-22	149.202.120.35 (ClassC)
2017-03-22	158.69.143.104 (ClassC)
2017-03-22	109.201.135.34 (ClassC)
2017-03-22	149.202.120.37 (ClassC)
2017-03-22	158.69.143.106 (ClassC)
2017-03-22	78.41.204.26 (ClassC)
2017-03-23	149.202.120.34 (ClassC)
2017-03-23	209.126.123.11 (ClassC)
2017-03-24	158.69.143.100 (ClassC)
2017-03-24	149.202.120.41 (ClassC)
2017-03-24	158.69.143.101 (ClassC)
2017-03-25	209.126.123.12 (ClassC)
2017-03-25	158.69.143.109 (ClassC)
2017-03-25	78.41.204.29 (ClassC)
2017-03-25	158.69.143.102 (ClassC)
2017-03-25	158.69.143.98 (ClassC)
2017-03-28	78.41.204.27 (ClassC)
2017-03-28	199.115.115.119 (ClassC)
2017-03-30	78.41.204.28 (ClassC)
2017-03-30	158.69.143.105 (ClassC)
2017-03-31	81.171.22.5 (ClassC)
2017-03-31	81.171.22.6 (ClassC)
2017-04-01	158.69.143.103 (ClassC)
2017-04-02	81.171.22.7 (ClassC)
2017-04-06	149.202.120.45 (ClassC)
2017-04-06	81.171.22.4 (ClassC)
2017-04-14	149.202.120.42 (ClassC)
2017-04-25	149.202.120.32 (ClassC)
2017-04-29	149.202.120.40 (ClassC)
2017-05-01	158.69.143.111 (ClassC)
2017-05-02	158.69.143.108 (ClassC)
2017-05-04	184.172.106.42 (ClassC)
2017-06-05	158.69.143.97 (ClassC)
2017-06-08	158.69.143.99 (ClassC)
2017-06-11	149.202.120.36 (ClassC)
2017-07-24	158.69.143.110 (ClassC)
2017-08-29	149.202.120.46 (ClassC)
2017-09-04	149.202.120.47 (ClassC)
2017-09-06	149.202.120.39 (ClassC)
2017-09-20	149.202.120.38 (ClassC)
2017-11-04	207.244.67.214 (ClassC)
2017-12-11	158.69.143.112 (ClassC)
2017-12-13	158.69.145.58 (ClassC)
2017-12-17	158.69.143.113 (ClassC)
2017-12-17	109.201.135.45 (ClassC)
2017-12-23	158.69.143.116 (ClassC)
2017-12-29	158.69.145.55 (ClassC)
2018-01-01	158.69.145.61 (ClassC)
2018-01-03	109.201.135.71 (ClassC)
2018-01-07	37.48.65.151 (ClassC)
2018-01-21	158.69.145.50 (ClassC)
2018-01-25	37.48.65.149 (ClassC)
2018-02-04	37.48.65.150 (ClassC)
2018-02-24	109.201.135.46 (ClassC)
2018-03-01	109.201.135.39 (ClassC)
2018-03-06	109.201.135.44 (ClassC)
2018-03-07	158.69.145.57 (ClassC)
2018-03-09	158.69.145.62 (ClassC)
2018-03-12	158.69.145.51 (ClassC)
2018-03-16	158.69.225.39 (ClassC)
2018-08-13	199.115.115.116 (ClassC)
2018-09-02	199.115.115.102 (ClassC)
2018-09-06	199.115.115.118 (ClassC)
2018-10-27	109.201.133.23 (ClassC)
2018-11-17	109.201.133.39 (ClassC)
2018-11-20	172.93.194.58 (ClassC)
2018-11-21	216.157.88.24 (ClassC)
2018-11-21	104.237.196.115 (ClassC)
2018-12-19	162.222.213.195 (ClassC)
2019-03-09	207.244.67.139 (ClassC)
2019-03-30	5.79.68.110 (ClassC)
2019-04-05	109.201.133.68 (ClassC)
2019-04-10	109.201.133.54 (ClassC)
2019-04-15	37.48.65.136 (ClassC)
2019-04-22	109.201.133.69 (ClassC)
2019-04-24	109.201.133.56 (ClassC)
2019-04-27	162.222.213.198 (ClassC)
2019-04-28	207.244.67.138 (ClassC)
2019-04-29	162.222.213.197 (ClassC)
2019-05-06	5.79.68.109 (ClassC)
2019-05-10	199.115.116.216 (ClassC)
2019-05-11	162.210.196.167 (ClassC)
2019-05-13	162.210.199.87 (ClassC)
2019-05-14	37.48.65.145 (ClassC)
2019-05-17	5.79.68.108 (ClassC)
2019-05-21	162.210.195.122 (ClassC)
2019-05-24	5.79.68.107 (ClassC)
2019-05-25	162.210.195.123 (ClassC)
2019-06-08	162.210.196.166 (ClassC)
2019-06-22	37.48.65.144 (ClassC)
2019-06-29	162.210.199.65 (ClassC)
2019-07-02	162.222.213.196 (ClassC)
2019-07-05	162.222.213.199 (ClassC)
2019-07-16	94.229.72.115 (ClassC)
2019-07-16	5.79.79.209 (ClassC)
2019-07-17	104.237.196.117 (ClassC)
2019-07-17	108.59.12.98 (ClassC)
2019-07-17	78.41.204.30 (ClassC)
2019-07-18	108.59.12.101 (ClassC)
2019-07-18	108.59.12.100 (ClassC)
2019-07-19	94.229.72.119 (ClassC)
2019-07-19	94.229.72.120 (ClassC)
2019-07-19	37.48.65.152 (ClassC)
2019-07-19	85.159.233.35 (ClassC)
2019-07-20	94.229.72.124 (ClassC)
2019-07-22	172.93.194.59 (ClassC)
2019-07-23	108.59.12.99 (ClassC)
2019-07-23	85.159.233.55 (ClassC)
2019-07-24	104.237.196.116 (ClassC)
2019-07-25	85.159.233.44 (ClassC)
2019-07-25	162.210.196.171 (ClassC)
2019-07-25	78.41.204.35 (ClassC)
2019-07-25	172.93.194.60 (ClassC)
2019-07-27	85.159.233.59 (ClassC)
2019-07-28	162.210.199.85 (ClassC)
2019-07-28	5.79.79.212 (ClassC)
2019-07-29	94.229.72.117 (ClassC)
2019-07-29	78.41.204.31 (ClassC)
2019-07-30	94.229.72.116 (ClassC)
2019-07-31	172.93.194.61 (ClassC)
2019-07-31	85.159.233.41 (ClassC)
2019-07-31	94.229.72.125 (ClassC)
2019-07-31	94.229.72.121 (ClassC)
2019-08-01	5.79.79.211 (ClassC)
2019-08-02	78.41.204.34 (ClassC)
2019-08-02	94.229.72.122 (ClassC)
2019-08-03	172.93.194.62 (ClassC)
2019-08-06	94.229.72.123 (ClassC)
2019-08-06	162.210.196.172 (ClassC)
2019-08-12	199.115.116.162 (ClassC)
2019-08-18	78.41.204.36 (ClassC)
2019-08-20	78.41.204.39 (ClassC)
2019-08-22	78.41.204.32 (ClassC)
2019-08-23	94.229.72.118 (ClassC)
2019-08-27	162.210.196.173 (ClassC)
2019-09-03	78.41.204.33 (ClassC)
2019-09-06	37.48.65.155 (ClassC)
2019-09-13	78.41.204.38 (ClassC)
2019-09-17	78.41.204.37 (ClassC)
2019-09-24	37.48.65.143 (ClassC)
2019-10-01	207.244.65.58 (ClassC)
2019-11-12	109.201.133.71 (ClassC)
2020-01-31	46.166.182.56 (ClassC)
2020-01-31	108.61.19.11 (ClassC)
2020-02-01	85.159.233.40 (ClassC)
2020-02-01	46.166.182.53 (ClassC)
2020-02-04	46.166.182.64 (ClassC)
2020-02-06	108.61.19.13 (ClassC)
2020-02-06	46.166.182.52 (ClassC)
2020-02-06	46.166.182.55 (ClassC)
2020-02-07	108.61.19.14 (ClassC)
2020-02-09	108.61.19.12 (ClassC)
2020-02-11	95.211.75.26 (ClassC)
2020-02-11	162.210.195.111 (ClassC)
2020-02-13	207.244.67.174 (ClassC)
2020-02-14	95.211.75.25 (ClassC)
2020-02-14	207.244.67.172 (ClassC)
2020-02-15	207.244.67.173 (ClassC)
2020-02-17	95.211.75.10 (ClassC)
2020-03-09	207.244.67.216 (ClassC)
2020-03-14	207.244.67.215 (ClassC)
2020-03-14	37.48.65.148 (ClassC)
2020-03-15	207.244.67.218 (ClassC)
2020-03-18	109.201.133.73 (ClassC)
2020-03-23	96.47.230.68 (ClassC)
2020-03-24	96.47.230.70 (ClassC)
2020-03-25	109.201.135.35 (ClassC)
2020-04-25	95.211.75.16 (ClassC)
2020-05-05	162.210.196.168 (ClassC)
2020-05-09	96.47.230.69 (ClassC)
2020-05-24	109.201.135.43 (ClassC)
2020-05-24	109.201.135.65 (ClassC)
2020-09-04	192.157.56.142 (ClassC)
2020-09-06	192.157.56.139 (ClassC)
2020-09-27	192.157.56.140 (ClassC)
2020-09-27	192.157.56.141 (ClassC)
2020-10-17	185.107.56.54 (ClassC)
2020-10-19	185.107.56.53 (ClassC)
2020-10-22	185.107.56.55 (ClassC)
2020-10-26	185.107.56.192 (ClassC)
2020-10-28	185.107.56.52 (ClassC)
2020-10-30	185.107.56.195 (ClassC)
2020-11-06	185.107.56.194 (ClassC)
2020-11-12	185.107.56.193 (ClassC)
2021-07-28	96.47.230.67 (ClassC)
2023-12-02	74.63.241.28 (ClassC)
2023-12-11	37.48.65.154 (ClassC)
2023-12-24	74.63.241.21 (ClassC)
2024-01-09	69.162.95.6 (ClassC)
2024-01-23	37.48.65.153 (ClassC)
2024-02-07	82.192.82.227 (ClassC)
2024-03-18	15.197.192.55 (ClassC)
2024-06-13	38.173.240.123 (ClassC)
2024-12-24	154.202.174.155 (ClassC)

Subdomains

Date	Domain	IP
www.directexe.com	2024-10-26	154.202.174.155

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]