Domain > lyrysor.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to lyrysor.com

MD5	A/V
87f7ce02879c766a0a4e5db1fbd23a34	[BDS/Simda.A.9]
10358ee94e5f833daf1549e150ea611c	[Win.Trojan.Shiz-1978] [Trojan.Packed.20771] [Win32/Kryptik.QEN] [W32/Shiz.HPH!tr] [PWS*Win32/Simda.D] [Mal/FakeAv-NL] [Backdoor.Shiz]
029fb322799493db698b6f5f07699b30	[Win.Trojan.Shiz-46] [Trojan.Packed.20771] [Win32/Spy.Shiz.NCD] [W32/Shiz.YWP!tr.bdr] [W32/Trojan2.NPSV] [SHeur4.GQH] [Trojan.Win32.Jorik] [Trojan.Apppatch] [Backdoor*Win32/Simda] [Trojan.Win32.Simda.g] [Mal/ZboCheMan-A] [TROJ_AG.F60BC039] [Trojan.Jorik.Shiz]
7e58410266c1a912928c3759a297aa34	[Backdoor.Shiz.rc] [Trojan.Shiz-101] [Trojan.Packed.20771] [Win32/Kryptik.SSU] [W32/Shiz.A!tr.bdr] [Trojan.Win32.Jorik] [Backdoor.Win32.Shiz.tiq] [Backdoor*Win32/Simda] [Mal/ZboCheMan-A] [TROJ_AG.592372C6] [Backdoor.Shiz]
296e28705a31428f3f2a1dbc27a30c02	[PWS*Win32/Simda.G] [BackDoor.acm] [SHeur3.CNOH]
b3fe75911ab7c6b24b427596052b181b	[Trojan.Packed.20771] [Win32/Kryptik.ULA] [W32/Shiz.YWP!tr.bdr] [PWS*Win32/Simda.AF] [Mal/ZboCheMan-A]
6f394c6a4d58c75f0d40eb988c4c125f
81ca2afb02000d2ab1858e3449c33cbf	[Backdoor.Shiz.rc] [Trojan.Shiz-58] [Trojan.Packed.20771] [Win32/Spy.Shiz.NCD] [W32/Shiz.NCD!tr] [SHeur4.BYP] [Backdoor.Win32.Shiz] [Backdoor.Win32.Shiz.tiq] [Trojan.Apppatch] [PWS*Win32/Simda] [Mal/ZboCheMan-A] [BScope.Trojan.Diple]
6fa7ef1d7e0ca04aff15372a9918adb1	[PWS.Simda.A] [WIN.Trojan.Shiz-240] [Trojan.DownLoader5.58022] [Win32/Spy.Shiz.NBX] [W32/Shiz.HPH!tr] [Win32.SuspectCrc] [PWS*Win32/Simda.D] [Mal/FakeAv-NL] [Malware-Cryptor.Bambarbiya] [Backdoor.Shiz.Win32.3594]
c6f8d22ebbcfae29c28ee251c6a72493
02ec9900722cdd37f5861c77b21e90c0	[PWS*Win32/Simda.AF] [BackDoor.acx]
dbbf082a18571fe3fc58d900c74f77b8	[Trojan.Packed.20771] [Win32/Kryptik.RNX] [W32/Shiz.HPH!tr] [Backdoor.Win32.Simda] [Backdoor.Win32.Shiz.raj] [BKDR_SHIZ.SMA] [Backdoor.Shiz]
0727b6b493555907870ae77c65d4d330	[DR/Zbot.H] [Backdoor.Shiz.r8] [Win.Trojan.Shiz-2043] [Trojan.Packed.20771] [Win32/Kryptik.RSP] [W32/Shiz.HPH!tr] [SHeur3.COQC] [Backdoor.Win32.Simda] [Backdoor.Win32.Shiz.raj] [Trojan.Apppatch] [Backdoor*Win32/Simda] [Mal/ZboCheMan-A] [BKDR_SHIZ.SMA] [Backdoor.Shiz]
C10CC3386725956FAA831B82FB5E0C07
408c34ee9c87bd7f055b12cee68557d7
5ec2e6a90462c3166b1c6348edadd290	[Backdoor*Win32/Simda] [BDS/Simda.A.9]
0aeaef003c60059fa6739278a0773981	[Win.Trojan.Shiz-1138] [Trojan.PWS.Ibank.332] [Win32/Kryptik.ALZZ] [W32/Shiz.HPH!tr] [Trojan.Win32.Crypt] [Backdoor.Win32.Shiz.raj] [BKDR_CYCBOT.SME4] [Trojan.Jorik.Shiz]
302ae41f35757e5452a666a2e3b94cfb	[Trojan.Packed.20771] [Win32/Spy.Shiz.NBX] [W32/Shiz.HPH!tr] [Virus.Win32.Injector] [Trojan.WinLock] [Backdoor.Shiz]
132aec2d15b9710e95ac06c7056c24d9	[Win.Trojan.Shiz-1048] [Trojan.PWS.Ibank.300] [Win32/Kryptik.QEN] [W32/Shiz.HPH!tr] [Trojan-PWS.Win32.Simda] [Backdoor.Win32.Simda.ac] [Mal/FakeAv-NL] [Backdoor.Trojan] [Malware-Cryptor.Limpopo]
91da9eb858535028e77b6d5f99310dc4	[PWS*Win32/Simda.D] [BackDoor.add]

DNS Resolutions

Date	IP Address
2011-08-29	208.73.210.29 (ClassC)
2013-08-15	69.43.161.167 (ClassC)
2014-01-18	208.73.211.249 (ClassC)
2014-01-18	208.73.211.249 (ClassC)
2014-01-19	208.73.211.246 (ClassC)
2014-01-19	208.73.211.247 (ClassC)
2014-01-19	208.73.211.230 (ClassC)
2014-01-20	208.73.211.247 (ClassC)
2014-07-22	208.73.210.219 (ClassC)
2014-07-22	208.73.211.233 (ClassC)
2014-07-22	208.73.211.235 (ClassC)
2014-07-22	208.73.211.174 (ClassC)
2014-07-22	208.73.211.174 (ClassC)
2014-10-09	141.8.225.80 (ClassC)
2014-12-17	141.8.225.80 (ClassC)
2015-01-26	209.222.14.3 (ClassC)
2015-01-30	209.222.14.3 (ClassC)
2023-07-23	23.154.136.223 (ClassC)
2023-10-04	199.59.243.224 (ClassC)
2024-01-20	199.59.243.225 (ClassC)
2024-06-24	3.64.163.50 (ClassC)
2024-08-06	15.197.192.55 (ClassC)
2024-09-09	103.150.11.230 (ClassC)
2024-10-25	112.29.210.31 (ClassC)
2024-12-23	61.158.134.198 (ClassC)
2025-01-20	172.233.130.182 (ClassC)
2025-03-16	103.150.10.48 (ClassC)
2025-03-31	46.203.125.57 (ClassC)

Subdomains

Date	Domain	IP
www.lyrysor.com	2023-09-17	199.59.243.224

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]