Domain > hotmail.ru

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to hotmail.ru

MD5	A/V
3fb83eaf2a665f71ac2065f5f6956d50	[HW32.CDB.5da2] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cynagk] [Trojan.FakeAV] [Kryptik.CDQY] [Win32/Kelihos.GeEUUIB] [Backdoor.Win32.Hlux.dqkq] [Backdoor.Hlux!m6CCC6SKjdo] [Win32.Backdoor.Hlux.Lose] [Backdoor.Win32.Hlux.DUHE] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aDM]
8889d486a91b3448e8b429ef99a536d0	[HW32.CDB.1cb9] [Trojan.Win32.Kryptik.cwzoai] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnla] [Backdoor.Hlux!yM05ScK42o0] [Trojan.Packed.26544] [Mal/FakeAV-UF] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Hlux.DNLA!tr.bdr] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
797df4f92d18573ae98db61d4f8b0c89	[HW32.CDB.F65c] [Packed.Win32.Katusha.3!O] [Trojan.FakeAV] [Kryptik.CCQY] [Backdoor.Win32.Hlux.dtsc] [Trojan.Win32.Hlux.cxnmks] [TrojWare.Win32.Kryptik.CBNK] [BackDoor.Slym.13011] [TR/Kryptik.oenzk] [Trojan[Backdoor]/Win32.Hlux] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.FakeAV] [W32/Trojan.IECY-1005] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Backdoor.Win32.Hlux.cri] [W32/Hlux.CBNK!tr.bdr] [Crypt_s.GPJ]
1bccf2506ca688a6cf6e6870fe33faaa	[Artemis!1BCCF2506CA6] [Trojan.Win32.PEF.dgjbul] [Suspicious.Cloud.9] [Trojan.Symmi.DB337] [TrojanDownloader:Win32/Gobundaz!rfn] [Trojan/Win32.Spnr] [Trojan.Win32.Downloader.aeG] [Win32.SuspectCrc] [W32/Delf.APN!tr.dldr] [Trj/Chgt.L]
ebad220b434bf85cb197e35ec40d1936	[Trojan.Win32.Badur.ctpttv] [WS.Reputation.1] [TROJ_SPNV.01A814] [Trojan.Win32.Badur.gizb] [TrojWare.Win32.Delf.ebs] [Trojan.DownLoader9.4478] [Win32.Troj.Undef.(kcloud)] [W32/Trojan.JPZU-4870] [Trojan/Win32.Downloader] [Trj/CI.A] [PE:Trojan.Banload!6.1270] [Trojan-Dropper.Delf] [W32/Delf.RQV!tr.dldr] [Win32/DH{ICQiJVdO}] [Trojan.Win32.Badur.ACYH] [Win32/Trojan.Downloader.97e]
2e84758ba902e77d1ee9a8913ffde34a	[W32.Clodb26.Trojan.c9ec] [Artemis!2E84758BA902] [W32/DldrX.ASEZ] [Trojan.Win32.Downloader.190062] [Virus.Win32.Heur.p] [Trojan.DownLoad1.14420] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Win32.Hack.ThinlPackerT.a.378833] [TrojanDownloader:Win32/VB.NI] [W32/Downloader.JGTG-6555] [Trojan.Win32.Downloader.AiEa] [Trojan-Downloader.Win32.Banload] [Downloader.Banload.ZOQ] [Trj/Downloader.MDW] [Win32/Trojan.Dropper.b73]
0fe6365efe7aed40de0066e179d0f646	[W32.Clod5de.Trojan.50d0] [Trojan.Dropper.SGM] [Trojan.Dropper.SGM] [Artemis!0FE6365EFE7A] [W32/DldrX.ATCK] [Downloader] [Trojan.Dropper.SGM] [Trojan.Win32.A.Downloader.193271] [Trojan.Dropper.SGM] [Trojan.Dropper.SGM] [Trojan.DownLoad1.24859] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Win32.Hack.ThinlPackerT.a.378833] [TrojanDownloader:Win32/VB.NI] [Trojan.Dropper.SGM] [W32/Downloader.CYWO-4708] [Virus.Win32.Heur.p] [Trojan.Win32.Downloader.AoE] [Trojan-Downloader.Win32.Banload] [Trj/CI.A] [Win32/Trojan.Dropper.b73]
ba38f7c52eafa83a4f368b6c6ae17b51	[HW32.CDB.Fc1e] [Trojan.Crypt.Delf.B] [Trojan.Crypt.Delf.B] [Win32.TrojanDownloader.Banload.9] [Trojan/Downloader.Dadobra.afm] [Trojan.DL.Dadobra!IpHFYA2R3x0] [W32/Downldr2.CCCJ] [Downloader] [DLoader.NAVE] [TROJ_DLOADER.MCS] [Trojan.Packed-4] [Trojan-Downloader.Win32.Dadobra.afm] [Trojan.Crypt.Delf.B] [Trojan.Win32.Dadobra.ugej] [Win32.Trojan-downloader.Dadobra.Pfjc] [Trojan.Crypt.Delf.B] [Heur.Packed.Unknown] [Trojan.Crypt.Delf.B] [Trojan.DownLoader.63243] [TR/Crypt.Delf.B.93] [TROJ_DLOADER.MCS] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Trojan[Downloader]/Win32.Dadobra] [Win32.TrojDownloader.Dadobra.a.(kcloud)] [Trojan.Win32.A.Downloader.73728.AKS] [Trojan.Crypt.Delf.B] [Win-Trojan/Xema.variant] [TrojanDownloader] [Trojan.Win32.Dadobra.ADO] [PE:Trojan.Win32.Undef.dva!1075123518] [Trojan-Downloader.Win32.Banload] [Dloader.X!tr] [Downloader.Banload.UEP] [Trj/Dadobra.QW] [Win32/Trojan]

DNS Resolutions

Date	IP Address
2009-11-21	82.204.219.135 (ClassC)
2010-08-04	194.186.88.34 (ClassC)
2011-02-25	194.186.88.58 (ClassC)
2012-09-01	62.141.94.79 (ClassC)
2013-09-07	62.141.94.20 (ClassC)
2013-11-05	62.141.94.10 (ClassC)
2014-05-30	62.141.94.20 (ClassC)
2014-07-08	62.141.94.10 (ClassC)
2014-08-19	80.68.248.79 (ClassC)
2014-08-20	80.68.248.237 (ClassC)
2014-09-12	80.68.248.238 (ClassC)
2015-03-06	185.79.118.79 (ClassC)
2023-08-27	31.31.205.163 (ClassC)
2024-04-01	185.43.6.212 (ClassC)
2024-05-29	80.87.203.178 (ClassC)
2024-12-28	95.214.54.102 (ClassC)

Port 80

Subdomains

Date	Domain	IP
fotos.facebook02.hotmail.ru	2014-06-12	62.141.94.79
albumjulia.hotmail.ru	2015-06-12	185.79.118.79
ftp.hotmail.ru	2014-01-22	62.141.94.79

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]