Help
RSS
API
Feed
Maltego
Contact
Domain > oa.ameteksen.com
×
This indicator is
referenced
in AlienVault OTX pulse ""
Is this malicious?
Yes
No
Most users have voted this as
MALICIOUS
Reports
http://blog.crowdstrike.com/sakula-reloaded/
http://www.secureworks.com/cyber-threat-intelligen...
http://www.symantec.com/connect/blogs/black-vine-f...
http://www.symantec.com/content/en/us/enterprise/m...
https://otx.alienvault.com/pulse/55b7888c4637f26f0...
https://otx.alienvault.com/pulse/55bb9a424637f2386...
https://otx.alienvault.com/pulse/564ce8824637f2388...
https://otx.alienvault.com/pulse/56af8cc34637f2355...
https://www.crowdstrike.com/blog/french-connection...
Files that talk to oa.ameteksen.com
MD5
A/V
c869c75ed1998294af3c676bdbd56851
[
Trojan/W32.ZxPlug.141104
] [
Trojan.Sakurel
] [
RTF/EXEDrop.A
] [
TROJ_SAKUREL.A
] [
Trojan.MulDrop!/U7HvNLW9Pg
] [
UnclassifiedMalware
] [
Trojan.MulDrop5.9639
] [
Win32.Troj.Sakurel.A.(kcloud)
] [
Trojan:Win32/Sakurel.A
] [
Trojan.Win32.Sakurel
]
Whois
Property
Value
NameServer
NS64.DOMAINCONTROL.COM
Created
2013-10-15 00:00:00
Changed
2014-10-16 00:00:00
Expires
2015-10-15 00:00:00
Registrar
GODADDY.COM, LLC