Domain > gigasbh.org

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to gigasbh.org

MD5	A/V
770c4dd2fe04d5673a843dd6d7b13774	[Malware.Packer.EPEX] [TROJ_JORIK.USA] [Trojan.Win32.Jorik.IRCbot.xkr] [Trojan.IRCbot!kLMvkeGgOFM] [Win32.HLLW.Digs] [Trojan.Win32.Meredrop] [TR/Obfuscate.PN.32] [Artemis!770C4DD2FE04] [W32/Dorkbot-EV] [Win32.Troj.Jorik.x.(kcloud)] [Trojan:Win32/Meredrop] [Trojan/Win32.Jorik] [Worm.Propr.3413] [Win32/Nomkesh.C] [Win32.SuspectCrc] [W32/Jorik_IRCbot.XKR!tr] [Trj/CI.A]
eeff410a4bc62672f1163f0fd9bec3e5	[RDN/Ransom!bv] [SPyware.Zbot.ED] [Trojan] [WORM_DORKBOT.LF] [Trojan-Ransom.Win32.Blocker.barm] [Trojan.Blocker!XjcnUWb2y2I] [Worm:W32/Dorkbot.K] [Win32.HLLW.Autoruner1.35127] [Worm/Dorkbot.AM.5] [Artemis!EEFF410A4BC6] [Win32.Troj.Undef.(kcloud)] [Worm:Win32/Dorkbot.AM] [Win32/Nomkesh.C] [Trojan.Win32.Loktrom] [W32/AutoRun.WEU!worm]
102582ed42748f9104bbd90fd8008a04	[HW32.CDB.7556] [Artemis!102582ED4274] [WS.Reputation.1] [Backdoor.Win32.Androm.arsq] [UnclassifiedMalware] [Win32.HLLW.Digs.2] [TR/Symmi.31179] [Trj/CI.A] [Win32.Hack.Androm.ar.(kcloud)] [Worm:Win32/Dorkbot.AM] [Malware-Cryptor.101] [Win32/Nomkesh.C] [Win32.SuspectCrc] [W32/Androm.ARSQ!tr.bdr]
f5fb3937ba24b2a1a11a0f34cad5e151	[Worm.Dorkbot] [Trojan] [Trojan/Nomkesh.c] [WORM_DORKBOT.LB] [Win32.HLLW.Autoruner1.35081] [Worm/Dorkbot.AM.10] [W32/Dorkbot-FD] [Win32.Troj.Undef.(kcloud)] [Worm:Win32/Dorkbot.AM] [Trojan/Win32.CProtection] [W32/Trojan.JAPQ-3456] [Win32/Nomkesh.C] [Worm.Win32.Dorkbot] [W32/Nomkesh.C]
af31910b2ee4827378bdf7a02abe9581	[TrojanSpy.Zbot.CG] [RDN/Ransom!cb] [Trojan.Ransom] [Riskware] [Trojan/Nomkesh.c] [W32.Inabot] [Win32/IrcBot.KFJ] [WORM_AUTORUN.ENW] [Trojan-Ransom.Win32.Blocker.bbvx] [Trojan.DR.Injector!VyPOK99Khcw] [Trojan.Spamlink.34] [Trojan.Win32.Ircbrute] [TR/Ransom.Blocker.bbvx] [Troj/Dorkbot-FR] [Trojan/Win32.Dofoil] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Ircbrute] [Trojan.Win32.A.Blocker.237568.E] [W32/Trojan.MQLH-5574] [TrojanFakeAV.Windef] [Malware.Inabot] [Win32/Nomkesh.C] [Win32.SuspectCrc] [W32/Blocker.BBVX!tr] [Trj/OCJ.E]
6f49b128753e5771417f922fd0cd9f8a
fc560c2a4b31b37566773e17240e80f4	[Artemis!FC560C2A4B31] [Trojan.Win32.IRCbot.wgq] [Artemis] [TR/Injector.86016.86] [Worm:Win32/Dorkbot.AT] [Trojan.Kazy.DA05DD] [Trojan.MSIL.Injector.KPT] [Win32.Trojan.Inject.Auto] [MSIL/Injector.KPT!tr] [MSIL8.ATWS] [Trj/Chgt.O]
f1fef69d22ebc59b253fdc8bcce420d3	[Win32.Trojan.Kazy.Eehi] [Trojan.Kazy.DA277A] [Trojan/Win32.Inject] [MSIL/Injector.KPT!tr] [Trojan.MSIL.Injector.KPT]
ac45cc1a44d628eacced995d51f7ce09
0f2090c7ad56b2483aa4b6c7547db377
b8abe0f1bebfe70401652792f341f427	[W32.BousiM.Trojan] [Trojan/W32.IRCbot.316416] [Trojan.IRC.r3] [Troj.W32.IRCbot.brd!c] [Trojan.Symmi.D9921] [backdoor.win32.fynloski.a] [Heur.AdvML.C] [Trojan.Win32.IRCbot.brd] [Trojan.Win32.Androm.ctrpps] [Win32.Trojan.Ircbot.Phgl] [UnclassifiedMalware] [Win32.HLLW.Autoruner2.11063] [Worm.Dorkbot.Win32.1300] [PWSZbot-FVP!EAAE297B0343] [Trojan/Buzus.bnuj] [TR/Dropper.A.23020] [Win32.Troj.IRCbot.b.(kcloud)] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Rombertik.N1111025885] [Artemis!B8ABE0F1BEBF] [Trojan.IRCbot!5Vk4fm+wCN0] [Trojan.Win32.Dynamer] [W32/Injector.AWAC!tr] [Downloader.Small.JYX] [Trj/CI.A] [Win32/Trojan.b43]
2bcdadeaf050298c7d2c0aad963c8e4b	[W32.Sality.PE] [Win32.Sality.3] [Virus/W32.Sality.D] [W32.Sality.U] [Win32.Sality.3] [Trojan.Inject] [Virus.Sality.Win32.23] [Win32.Sality.BL] [W32.Sality.AE] [Win32/Sality.NBA] [PE_SALITY.RL] [Win32:Sality] [Win32.Sality.3] [Win32.Sality.3] [Virus.Win32.Sality.beygb] [PE:Virus.Sality!1.A09C[F1]] [Win32.Sality.3] [Win32.Sality.3] [Win32.Sector.30] [PE_SALITY.RL] [Mal/Sality-D] [W32/Sality.AT] [Win32.Sality.lx.368640] [Win32.Sality.3] [Win32/Kashu.E] [Trojan:Win32/Bagsu!rfn] [Virus.Win32.Sality.bakc] [W32/Sality.AA] [Win32.Sality] [Trojan.Win32.Patcher] [Win32/Sality] [Virus.Win32.Sality.$Emu]

DNS Resolutions

Date	IP Address
2013-04-16	217.160.191.157 (ClassC)
2013-04-17	217.160.173.154 (ClassC)
2013-04-25	74.208.230.53 (ClassC)
2013-06-12	188.138.89.106 (ClassC)
2013-07-11	217.160.173.154 (ClassC)
2013-10-02	188.138.89.106 (ClassC)
2014-02-13	216.119.147.87 (ClassC)
2015-07-11	82.165.129.253 (ClassC)
2019-08-15	208.100.26.242 (ClassC)
2021-02-27	45.33.2.79 (ClassC)
2024-05-10	35.204.181.10 (ClassC)
2025-01-25	3.254.94.185 (ClassC)
2025-04-25	52.212.150.54 (ClassC)

Port 80

Subdomains

Date	Domain	IP
tests.gigasbh.org	2013-07-11	188.138.89.106

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]