Help RSS API Feed Maltego Contact                        

Domain > fast2.bacguarp.com

This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?

Most users have voted this as MALICIOUS

Reports

http://researchcenter.paloaltonetworks.com/2015/05...    
https://otx.alienvault.com/pulse/5544b973b45ff5392...    

Files that talk to fast2.bacguarp.com

MD5A/V
5daf1bb24ef109a1713bf22ab2315fe9
91b5cf6b598582b8a6f304f07b947f89
e85e2dcc9bae7457a0a3dffffe2e50c1
c116cd083284cc599c024c3479ca9b70[BDS/Plugx.A.136] [Trojan.BrowseBan.536] [Win32/Korplug.AM] [W32/Korplug.AM] [Backdoor.Win32.Plugx] [Backdoor.Win32.Gulpix.lh*Backdoor.Win32.Gulpix.ch] [Backdoor*Win32/Plugx.A] [Backdoor.Gulpix]
b139fbf28cc986079e0371c86fb8610b
2d55dd4b9b5e4043450de52deabd3461
ac157fff310a45cba1933c432a22bdf7[W32/Trojan.ASHA-7465] [Trojan.Proxy.25479] [Win32/Korplug.AS] [W32/Luder.AS!worm] [Backdoor.Win32.Plugx] [Worm.Win32.Luder.bqup] [Backdoor*Win32/Plugx.A] [Troj/Plugx-J] [Backdoor.Gulpix]
1d3c184dde74ac4ea8a25e57a40c6ce4

Whois

PropertyValue
Email wedgsdva@hotmail.com
NameServer NS2FWZ.NAME.COM
Created 2011-06-08 00:00:00
Changed 2014-05-12 00:00:00
Expires 2015-06-08 00:00:00
Registrar NAME.COM, INC.