Domain > domain.rm6.org

This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?

Most users have voted this as MALICIOUS

Reports

http://www.symantec.com/content/en/us/enterprise/m...

https://raw.githubusercontent.com/fireeye/pivy-rep...

https://www.fireeye.com/resources/pdfs/fireeye-poi...

Files that talk to domain.rm6.org

MD5	A/V
091457444b7e7899c242c5125ddc0571	[Backdoor/W32.Poison.177722] [Backdoor.Poison.bf] [Trojan.Win32.Poison.hyuqu] [W32/Poison.AR] [Backdoor.Odivy] [Poison.ECI] [Trojan.Poison-1493] [Backdoor.Win32.Poison.aphb] [Trojan.Poison!K351CemmZDk] [Virus.Win32.Heur.l] [Troj/EncProc-H] [Heur.Suspicious] [Trojan.DownLoader9.53135] [BDS/Poisonivy.E.684] [Mal_PoisonCFG] [Trojan[Backdoor]/Win32.Poison] [Win32.Troj.Odivy.(kcloud)] [Backdoor:Win32/Poison.BF] [Backdoor.Win32.Poisonivy.177722] [W32/Poison.SKUI-2796] [Win-Trojan/Poisonivy.177722] [BackDoor.Poison] [Win32/Poison.NHA] [Backdoor.Win32.Poison] [W32/Tfr.K!tr] [Backdoor.Win32.Poison.AJbo] [Backdoor*Win32/Poison.BF]
22f77c113cc6d43d8c12ed3c9fb39825	[Trojan-Downloader/W32.Injecter.133007] [Riskware] [Trojan.DL.Injecter!bZA05gtDP+k] [Win32/Poison.NGK] [W32/Poison.AA] [Backdoor.Trojan] [TROJ_SPNR.15KL11] [Win32.Trojan] [Trojan-Downloader.Win32.Injecter.gxz] [Backdoor.Win32.Poison!IK] [Heur.Suspicious] [Trojan.DownLoad2.38574] [TR/RQG.A.2] [Troj/Inject-QL] [TrojanDownloader.Injecter.bjz] [Trojan/Win32.Injecter] [Backdoor:Win32/Poison.BF] [Win-Trojan/Hupigon.133007] [Trojan-Injector.14105] [Trojan.ADH] [Backdoor.Win32.Poison] [W32/BENNET.A!tr]
f18c7639dbb8644c4bca179243ee2a99	[W32.Clod3a1.Trojan.a0ea] [TrojanDownloader.Injecter.gxk] [BackDoor-DSW] [Trojan.Win32.Injecter.gdsbz] [W32/Poison.AM] [Backdoor.Trojan] [BKDR_POISON.BIE] [Trojan.DL.Injecter!gwxaRbokKBo] [UnclassifiedMalware] [TR/RQG.A.1] [W32/Poison.WFSX-3479] [Win-Trojan/Poison.154539] [TrojanDownloader.Injecter] [Win32/Poison.NGK] [Trojan-Downloader.Win32.Injecter] [W32/BDoor.DSW!tr] [Backdoor*Win32/Poison.AZ]

Whois

Property	Value
Name	Jeff Strickland
Email	ec88cf4be1cecaeb705c8bb70c9aa7fb-js3541@contact.gandi.net
Address	2706 Saint Edwards Cir
Zip Code	78704
City	Austin
State	Texas
Country	US
Phone	+1.5127991595
Fax	+33.1
NameServer	ns2.afraid.org
Created	2008-05-03 21:53:59
Changed	2012-04-04 22:00:43
Expires	2015-05-03 21:53:59
Registrar	Gandi SAS (R42-LROR)