Domain > microdelta.crabdance.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

https://securelist.com/files/2014/11/darkhotelappe...

Files that talk to microdelta.crabdance.com

MD5	A/V
efda0c1d8593d3ab3a7c079b71a0f2bc	[Win32.Nemim.A] [TR/Nemim.DC] [Win32/Nemim.A] [Trojan.Inject2.24] [W32/Nemim.B] [Virus.Win32.Nemim] [Virus.Win32.Pioneer.dx] [Virus*Win32/Nemim.A] [Win32.Rdat.a] [Infostealer.Nemim!inf] [PE_NEMIM.A]
1e6e1ed78298cfd9033c3b463558de02	[Win32.Nemim.A] [W32/Trojan.PVJV-6720] [TR/Nemim.DC] [Win32/Nemim.A] [Trojan.Inject2.24] [W32/Pioneer.DX] [Virus.Win32.Nemim] [Virus.Win32.Pioneer.dx] [Virus*Win32/Nemim.A] [Win32.Rdat.a] [Infostealer.Nemim!inf] [PE_NEMIM.A]
62210a20aad74a27970b8721ed9ae3c3	[Virus*Win32/Nemim.A] [TR/Nemim.DC]
e777e747076f4a0827f065d2c7b2073f	[Virus*Win32/Nemim.A] [TR/Nemim.DC]
357701d20d7b84be4821fe8d505148d3	[Virus*Win32/Nemim.A] [TR/Nemim.DC]
d46204e579808d520affcc71a7d35cda	[Win32.Nemim.A] [TR/Nemim.DC] [Win32/Nemim.A] [Trojan.Inject2.24] [W32/Nemim.B] [Virus.Win32.Nemim] [Virus.Win32.Pioneer.dx] [Virus*Win32/Nemim.A] [Win32.Rdat.a] [Infostealer.Nemim!inf] [PE_NEMIM.A]
9c626cb70362065505c0478a436fe0a0
836c34e1279c58cff79c5018b40390d3	[Virus*Win32/Nemim.A] [TR/Nemim.DC]
c4c4f046d0d4be0cddbf91b79adbefb1	[W32/Trojan.LZNO-5569] [TR/Nemain.A] [Win32/Luder.BQ] [TrojanAPT.Garveep.B4] [Trojan.DownLoader9.19648] [W32/Luder.BRWF!worm] [Worm.Win32.Luder] [Trojan.Win32.Karba.d] [Trojan*Win32/Nemain.A] [TROJ_GARVEEP.SM] [Worm.Luder]
2aac9d340620da09d96929ba570978c4	[W32/Trojan.GGZB-6284] [TR/Nemain.A] [Win32/Luder.BQ] [Worm.Luder.brwf] [Win.Trojan.Darkhotel.Karba] [Trojan.DownLoader9.19648] [Trojan.Win32.Karba.d] [Trojan*Win32/Nemain.A] [TROJ_GARVEEP.SM] [Worm.Luder]
e305fc1d9d113664d0008e053094e543	[Virus*Win32/Nemim.A]
9d248e5cc726f2aa2fa4f06566a2d5b8	[W32.HfsAutoB.6DBC] [Win32.Nemim.A] [Win32.Nemim.A] [Virus.Win32.Pioneer!O] [Win32.Nemim.A] [VirTool.Win32.Obfuscator.da!k]
7d304a9cdcda75b1cb9537618f5ed398	[Win32.Nemim.A] [Win32.Nemim.A] [Virus.Win32.Pioneer!O] [Win32.Nemim.A] [Virus]
0d3e3fd44faa32e0d83b02c8b7cff49c	[W32.HfsAutoB.2057] [Win32.Nemim.A] [Win32.Nemim.A] [Virus.Win32.Pioneer!O] [VirTool.Win32.Obfuscator.da!k]
0b6caacd4081d3b18e847a40c1b6a7f3	[W32.HfsAutoB.F3B5] [Win32.Nemim.A] [Win32.Nemim.A] [Virus.Win32.Pioneer!O] [(Suspicious)]

Whois

Property	Value
Email	HOSTMASTER@AFRAID.ORG
NameServer	NS2.AFRAID.ORG
Created	2005-11-22 00:00:00
Changed	2014-10-24 00:00:00
Expires	2015-11-22 00:00:00
Registrar	ENOM, INC.