Domain > prets-immobiliers.org

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

https://otx.alienvault.com/pulse/56affb4c4637f2355...

https://otx.alienvault.com/pulse/56b2251167db8c168...

https://blogs.sophos.com/2016/01/06/the-current-st...

https://techhelplist.com/spam-list/1039-money-tran...

https://www.virustotal.com/en/file/a5a5b9e1e629a37...

Files that talk to prets-immobiliers.org

MD5	A/V
2c17ca4c2e05ef0551d7618a243466f6	[BehavesLike.Win32.AdwareNaviPromo.fh]
201203d5caa58c3378a75a11c0f45b3e
4c3a6b40a7dbdc977f68c149278561c0	[Troj.Downloader.Script!c] [VBS/Psyme] [JS/TrojanDownloader.Nemucod.DQ] [JS_CRYPLOD.YYSJR] [VBS.Downloader.877[h]] [JS_CRYPLOD.YYSJR] [Win32.Trojan.Raas.Auto]
5e8de61ad3c0a7ae5a107769d8c51646
d6ed3ffc78e3447d8971c9b116f95fb6
ca05942d7d363c62caba7fe0c66e7770
1680835ab6998271127b9d172cf1c691	[Suspicious.Cloud.2] [Trojan/Win32.Teslacrypt]
49b620989c6b52ead93430b7685812da	[BehavesLike.JS.Downloader.xv]
2b8238af766a56adbd80791bc1db61c5
033d7296661f1456011a34f85db7ca24	[Artemis!033D7296661F] [Ransom.TeslaCrypt] [Trojan.Cryptlock.N!g2] [TROJ_FORUCON.BMC] [Trojan-Ransom.Win32.Bitman.hoc] [Trojan.Packed.29794] [TROJ_FORUCON.BMC] [BehavesLike.Win32.PWSZbot.fh] [TR/Crypt.ZPACK.192745] [Trojan[Ransom]/Win32.Bitman] [Uds.Dangerousobject.Multi!c] [Trojan/Win32.Teslacrypt] [Adware.Win32.iBryte.EMNJ] [W32/Kryptik.EMNJ!tr] [Win32/Trojan.042]
6c12cd05a7e4e0bd165afdd1859d2201	[Artemis!6C12CD05A7E4] [Ransom.TeslaCrypt] [Worm.Ngrbot!uuWa+q9Hpeo] [Suspicious.Cloud.2] [TROJ_FORUCON.BMC] [Worm.Win32.Ngrbot.aycf] [Worm.Win32.A.Ngrbot.357376.D[h]] [Trojan.Inject1.56622] [TROJ_FORUCON.BMC] [BehavesLike.Win32.MysticCompressor.fh] [W32/Trojan.EXSG-0534] [TR/Crypt.ZPACK.192291] [Worm/Win32.Ngrbot] [Trojan.Zusy.D2C118] [Trojan/Win32.Upbot] [VirTool:Win32/CeeInject.GF] [Win32.Worm.Ngrbot.Wopu] [Trojan.Win32.Crypt] [W32/Ngrbot.AYCF!worm] [Crypt_r.AWG] [Adware.Win32.iBryte.EMIU]
6e9a65951344a5b2dc36be82d2b2a926	[BehavesLike.JS.Downloader.xv]
68915163576d45b6c3c40dec12715e68
23d8d9fc07c20a3460db0c4d4e190759	[BehavesLike.JS.Downloader.xv]
435f224bde1af65538cfa5d858aa831f	[Artemis!435F224BDE1A] [Ransom.TeslaCrypt] [Uds.Dangerousobject.Multi!c] [W32/Trojan.KJVF-2469] [Suspicious.Cloud.2] [Ransom_CRYPTESLA.YUYAHF] [Trojan-Ransom.Win32.Bitman.hpi] [Win32.Trojan.Bp-dropperv.Bzmy] [Trojan.Encoder.3719] [Ransom_CRYPTESLA.YUYAHF] [BehavesLike.Win32.Backdoor.gc] [Troj/TeslaC-F] [TR/Crypt.Xpack.441786] [Ransom:Win32/Tescrypt.E] [Trojan/Win32.Teslacrypt] [FileCryptor.GQH] [Trojan.Win32.Injector.CRMO]
6d2415a6257352f383d3c9cee7f38f6d	[TR/Crypt.ZPACK.192317] [Win32/Kryptik.EMIU] [Trojan.Cryptlock.N!g2] [W32/Kryptik.EMIU!tr] [Ransom*Win32/Tescrypt.A] [Ransom.TeslaCrypt] [Trojan.Win32.Crypt] [Worm.Win32.Ngrbot.aycf] [TROJ_FORUCON.BMC] [Trojan.Inject1.56622]
6e17df4b6fa3112ea4111779dee48f00	[TR/Crypt.ZPACK.192328] [Win32/Kryptik.EMIU] [Crypt5.AFRJ] [Trojan.Cryptlock.N!g2] [W32/Kryptik.EMIU!tr] [Trojan.Injector] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Bitman.hgt] [TROJ_FORUCON.BMC] [Trojan.Packed.29794]
60f4fbc0a58f146e8fd6d90b8d57c271	[Trojan-FHTW!60F4FBC0A58F] [Ransom.TeslaCrypt] [Troj.Ransom.W32.Bitman!c] [Trojan.Bitman!] [Trojan.Cryptlock.N!g2] [Ransom_CRYPTESLA.YUYAHF] [Trojan-Ransom.Win32.Bitman.hoy] [Trojan.Win32.ZPACK.eaamur] [Mal/Wonton-CB] [TrojWare.Win32.Kryptik.~IA] [Trojan.Packed.29794] [Ransom_CRYPTESLA.YUYAHF] [Trojan-FHTW!60F4FBC0A58F] [TR/Crypt.ZPACK.192803] [Trojan[Ransom]/Win32.Bitman] [VirTool:Win32/CeeInject.GF] [Trojan.Barys.DC817] [Trojan/Win32.Teslacrypt] [Trj/CI.A] [Win32.Trojan.Bitman.Wpjo] [Trojan.Win32.Crypt] [W32/Kryptik.EMNJ!tr] [Adware.Win32.iBryte.EMNJ] [Win32/Trojan.61e]
1914acc9110eb0f72c000bc1a1061497	[Ransom.TeslaCrypt] [Trojan.Filecoder.Win32.1890] [Trojan.Filecoder!QbEkELy1kAk] [Trojan.Cryptolocker.N] [Win32/Filecoder.TeslaCrypt.I] [Ransom_CRYPTESLA.YUYAHF] [Trojan.Win32.Encoder.eabfdk] [Uds.Dangerousobject.Multi!c] [Mal/Ransom-EC] [Trojan.Encoder.3743] [Ransom_CRYPTESLA.YUYAHF] [TR/AD.TeslaCrypt.Y.170] [Malicious_Behavior.VEX.99] [Trojan.Cripack.1] [Trojan/Win32.Teslacrypt] [Ransom:Win32/Tescrypt!rfn] [Trj/TeslaCrypt.A] [Win32.Trojan.Bp-dropperv.Bzmy] [Trojan.Win32.Filecoder] [FileCryptor.GQK]
78d8fadc8ddd5f17dcac4411f145c92b	[Trojan/W32.Bitman.503808] [Ransom.TeslaCrypt] [Trojan.Bitman!] [Trojan.Cryptlock.N!g1] [Ransom_CRYPTESLA.YUYAHF] [Trojan-Ransom.Win32.Bitman.hpi] [Trojan.Win32.Encoder.eaapjs] [Win32.Trojan.Bp-dropperv.Bzmy] [Trojan.Encoder.3719] [Ransom_CRYPTESLA.YUYAHF] [BehavesLike.Win32.PWSZbot.gc] [Mal/Ransom-EC] [W32/Trojan.KJVF-2469] [TR/Crypt.Xpack.441786] [Trojan[Ransom]/Win32.Bitman] [Ransom:Win32/Tescrypt.E] [Uds.Dangerousobject.Multi!c] [Trojan/Win32.Teslacrypt] [Trojan.Win32.Injector] [W32/Injector.CRMO!tr] [FileCryptor.GQH] [Win32/Trojan.22e]

DNS Resolutions

Date	IP Address
2016-02-01	146.255.37.1 (ClassC)
2016-02-09	212.227.175.10 (ClassC)
2020-05-06	212.227.247.124 (ClassC)
2024-12-23	178.32.110.193 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]