Domain > ftp.alizametal.com.tr

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to ftp.alizametal.com.tr

MD5	A/V
dc01b372f260cab4d25ccf58c38416f5	[TR/Graftor.1103.80] [W32/Worm-FFR!DC01B372F260]
c67496f32b1daf2a55dd66a92e8700c5	[Virtu-FWin32Virtu-F] [Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [Backdoor.IRCBot] [W32/Worm-FQU!C67496F32B1D] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [Troj/Juched-A] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
583124aead56913bb562ef91d587c7d3	[TR/Graftor.1103.80] [W32/Worm-FQU!583124AEAD56] [Win.Trojan.BankerSpy-2]
cb15ccbea7281e036feee5a2109839b5	[Worm/Ganelp.G.999] [Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [Backdoor.IRCBot] [W32/Worm-FBL!CB15CCBEA728] [Trojan.FakeFolder!5426] [Troj/Juched-A] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
cbcb25279d8dfc1e4672c381d9e18adf	[TR/Graftor.1103.80] [Worm*Win32/Ganelp.E]
3998a85358e49878a13e813afe0bcb8c	[Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [W32/Worm-FBL!3998A85358E4] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
79a5d507adab322277fb6a6f35e7a42c	[VitroWin32Vitro] [Worm/Ganelp.G.42] [Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [Backdoor.IRCBot] [W32/Worm-FQU!79A5D507ADAB] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [Troj/Juched-A] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
a88a60f06473e0dd02c1f9eed6465015	[Worm*Win32/Ganelp.E]
4cb0294dd4f7774b1cccdfbfff8d3cce
966499f8c9ab3984dc0cdac8a7695436	[Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [W32/Worm-FQU!966499F8C9AB] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
e1393922d76aee018f6ed7bf56f69ca1	[Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [W32/Worm-FQU!E1393922D76A] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
d6f0b10119ae5651e82b358675354d45	[Obfuscated-FQW!hb] [TR/Graftor.1103.80] [Worm*Win32/Ganelp.E]
799437449a06fbfe24a8797b0be5ca95	[WORM/Ganelp.G.999] [W32/Worm-FBL!799437449A06]
1194ddc033f96dbf1121a76ba0fab401	[Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [W32/Worm-FBL!1194DDC033F9] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
15b01b174a3b6539546aa64794b89a2c	[Obfuscated-FQW!hb] [TR/Graftor.1103.80] [Worm*Win32/Ganelp.E]
bda5aae76ee2edd4bc30933b4a753521	[TR/Graftor.1103.80] [Win.Trojan.BankerSpy-2] [W32/Worm-FBL!BDA5AAE76EE2]
4b1b1d8477406a5522904182b337b912	[TR/Graftor.1103.80] [Worm*Win32/Ganelp.E]
75dd80b8fdf55878ae339c724ee7d44f	[Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [Backdoor.IRCBot] [W32/Worm-FQU!75DD80B8FDF5] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [Troj/Juched-A] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
59c74e4d2c37ddebd3c1826a37d8cdf3	[Worm.Ganelp.A6] [W32/Worm-FBL!59C74E4D2C37] [Backdoor.IRCBot] [EmailWorm] [Trojan.Win32.Juched.rdqgq] [W32.Griptolo] [W32/Crypt.AXCI] [WORM_GANELP.SMIA] [Win32:Vitro] [Worm.Win32.Juched.djh] [Worm.Juched!H8m0d585TgY] [Worm.Win32.Juched.DGH] [TR/Graftor.1103.80] [Heuristic.BehavesLike.Win32.Downloader.H] [Troj/Juched-A] [Worm.Juched.d.(kcloud)] [Worm:Win32/Ganelp.G] [Worm.Win32.A.Juched.229376.A] [Trojan/Win32.Npkon] [Worm.Juched] [Malware.Griptolo] [Worm.Ganelp!4106] [Worm.Win32.Juched] [W32/GANELP.C!worm]
d57c9522d72d5b223454092e52b824b1	[Virtu-FWin32Virtu-F] [Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [Backdoor.IRCBot] [W32/Worm-FQU!D57C9522D72D] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [Troj/Juched-A] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]

Whois

Property	Value
Organization	ALÝZA METAL ENDÜSTRÝ EKÝPMANLARI KALIP MAKÝNA TASARIM APART SANAYÝ VE TÝC
Email	dnsadmin@bursanet.com
Address	Mudanya Cad. No:337 Demirci Apt. K:1 D:2
Country	Türkiye
Phone	+ 90-224-2421448-
Fax	+
NameServer	res46.natrohost.com
Created	2007-07-04 00:00:00
Expires	2015-07-03 00:00:00

DNS Resolutions

Date	IP Address
2013-10-18	89.19.29.116 (ClassC)
2015-05-15	-
2025-04-11	185.42.173.103 (ClassC)

Port 80

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]