Domain > epostbank.go.kr

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to epostbank.go.kr

MD5	A/V
74c7fd7485b506227b48c8d7a753598f	[Suspicious.Cloud.5] [BackDoor.Tdss.11228] [Artemis] [TrojanSpy:Win32/Wedots.A] [Artemis!74C7FD7485B5] [BScope.P2P-Worm.Palevo] [Win32.SuspectCrc] [PSW.Banker7.AQY.dropper]
54ef9c6081750e1edc56c1acda43a22f	[HW32.Packed.815C] [Artemis!54EF9C608175] [Win32.Trojan.Startpage.Sxox] [BehavesLike.Win32.BadFile.cc] [TrojanSpy:Win32/Wedots.A]
4d478143711cbd2c7f26c3a5ed354bad	[HW32.Packed.2437] [Artemis!4D478143711C] [TSPY_WEDOTS.B] [TSPY_WEDOTS.B] [BehavesLike.Win32.BadFile.cc] [TrojanSpy:Win32/Wedots.A] [Win32/Heur] [Win32/Trojan.97a]
ce57ff193cbe410b1b9561c33e0da6a2
11b9401daec4c85cddd9fba66fae75ba	[Backdoor.Trojan] [BackDoor.Tdss.11228] [TrojanSpy:Win32/Wedots.A] [BScope.P2P-Worm.Palevo] [Win32/DH{Jw9YZ1I}] [Win32/Trojan.97a]
f201e087e3c3a827497798939b891acb
6937609df01ac327b02a41d780aefbd8	[Suspicious.Cloud.5] [Mal/EncPk-CK] [BackDoor.Tdss.11228] [BehavesLike.Win32.BadFile.cc] [W32/Banker.ABEA!tr.spy] [Artemis!6937609DF01A] [BScope.P2P-Worm.Palevo] [PSW.Banker7.BWA] [Trojan.Win32.Banker.ABEA]
efcb0636e429e3f099400ef276db96b0
7cdc187a56e483a6aa0a519a8c2c3c62

Whois

Property	Value
Name	koreapost
Email	cdms@ibi.net
Address	Sorin-dong, Chongno-gu Seoul
Zip Code	11011
NameServer	ns2.kornet.net
Created	2000-04-10 00:00:00
Changed	2014-03-04 00:00:00
Expires	2017-04-10 00:00:00
Registrar	IBI.net

DNS Resolutions

Date	IP Address
2019-11-19	210.90.8.170 (ClassC)
2025-08-04	125.60.0.198 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
www.epostbank.go.kr	2019-09-07	210.90.8.170

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]