Help RSS API Feed Maltego Contact                        

Domain > mongolbaatar.net

This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?

Most users have voted this as MALICIOUS

Reports

http://blog.safebit.mn/2015/11/plugx.html    
https://otx.alienvault.com/pulse/565da40d4637f2388...    

Files that talk to mongolbaatar.net

MD5A/V
9c6c697f4fbe5cc3c5c8900cbb390ed1[BDS/Plugx.A.107] [Backdoor*Win32/Plugx.A]
9d377eb3d1a7a5a97aef13af7180c9ec

Whois

PropertyValue
Email MONGOLBAATAR.NET@domainsbyproxy.com
NameServer PDNS06.DOMAINCONTROL.COM
Created 2014-10-18 00:00:00
Changed 2014-10-18 00:00:00
Expires 2015-10-18 00:00:00
Registrar GODADDY.COM, LLC