Domain > qwevrbyitntbyjdtyhvsdtrhr.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to qwevrbyitntbyjdtyhvsdtrhr.com

MD5	A/V
b793c4ea738c387024c5e2635778bfed	[Virus.Win32.Ramnit.A] [Win32.Ramnit.N] [RmnDrpWin32RmnDrp] [W32.Ramnit.H] [W32/Ramnit.E] [W32/Ramnit.C] [Win32/Ramnit.C] [W32.Ramnit.BA] [W32.Ramnit-1] [Trojan.Starter.1591] [Win32/Zbot.G] [Virus.Win32.Ramnit] [Virus.Win32.Nimnul.a] [Virus.Ramnit] [W32/Ramnit.a] [win32*winpe/ZBot.ZR] [Win32.Mgr.a] [W32/Ramnit-A] [W32.Ramnit.B!inf] [PE_RAMNIT.DEN] [Virus.Win32.Nimnul.b] [Virus.Nimnul.Win32.2]
b0a12186d8a1da5164a5832355d82ebe	[Win32/Ramnit.AC] [Trojan.Ramnit.A5] [Win.Trojan.Zbot-8883] [Trojan.Starter.1591] [Win32/Kryptik.LZT] [W32/Katusha.O!tr] [Zbot.OL] [Virus.Win32.Ramnit] [Spyware.Password] [PWSZbot-FFZ!B0A12186D8A1] [winpe/ZBot.ZR] [Mal/Zbot-CO] [TSPY_PW.2E6A6F34] [TrojanSpy.SpyEyes] [Trojan.Kryptik.Win32.93152]
f3bb8771b64e715fa16321ede127c7d2
7b834c28ea44d51cf604f58eaf39b4fc	[Virus.Win32.Ramnit.A] [RmnDrpWin32RmnDrp] [W32.Ramnit.H] [W32/Ramnit.E] [W32/Ramnit.C] [Win32/Ramnit.C] [W32.Ramnit.BA] [W32.Ramnit-1] [Trojan.Starter.1591] [Win32/Zbot.G] [Virus.Win32.Cryptor] [Virus.Win32.Nimnul.a] [Virus.Ramnit] [W32/Ramnit.a] [Virus*Win32/Ramnit.V] [Win32.Mgr.a] [W32/Ramnit-A] [W32.Ramnit.B] [PE_RAMNIT.DEN] [Virus.Win32.Nimnul.b] [Virus.Nimnul.Win32.2]
c964c2c76f21686a51115dc06245247b
2dbda2325461f0fe5f0cfa173380e8ad
2326fa2034732cf93847bbef36281fd0
e0631e83055f1eb57605e13e9958907d
63e8138e6fd1f4432ba07db6f9dd7c28	[Win.Trojan.Lebag-4]
c966e6bdc022650e8d179ab007fc382e	[W32/Trojan.XFKB-6075] [Win32/Ramnit.AC] [Trojan.Ramnit.A5] [Win.Trojan.Zbot-8883] [Trojan.Starter.1591] [Win32/Kryptik.LZT] [W32/Katusha.O!tr] [Zbot.OL] [Virus.Win32.Ramnit] [Spyware.Password] [PWSZbot-FFZ!C966E6BDC022] [Trojan*Win32/Ramnit] [winpe/ZBot.EOHW] [Mal/Zbot-CO] [TSPY_PW.2E6A6F34] [TrojanSpy.SpyEyes] [Trojan.Kryptik.Win32.93152]
a82e5958323d3084339c4131eff325cf	[Virus.Win32.Ramnit.A] [Win32.Ramnit.N] [RmnDrpWin32RmnDrp] [W32/Ramnit.E] [W32/Ramnit.C] [Win32/Ramnit.C] [W32.Ramnit.BA] [W32.Ramnit-1] [Trojan.Starter.1591] [Win32/Zbot.G] [Virus.Win32.Cryptor] [Virus.Win32.Nimnul.a] [Trojan.Spy.Zbot] [W32/Ramnit.a] [Trojan*Win32/Ramnit] [Win32.Mgr.a] [W32/Ramnit-A] [W32.Ramnit.B] [PE_RAMNIT.DEN] [Virus.Win32.Nimnul.b]
37fd17102eefe05f519b817f3f792664	[Win32/Ramnit.AC] [Win.Trojan.Zbot-8883] [Trojan.Starter.1591] [Win32/Kryptik.LZT] [W32/Katusha.O!tr] [Zbot.OL] [Virus.Win32.Ramnit] [Trojan.Spy.Zbot] [PWSZbot-FFZ!37FD17102EEF] [Trojan*Win32/Ramnit] [Mal/Zbot-CO] [TSPY_PW.2E6A6F34] [TrojanSpy.SpyEyes] [Trojan.Kryptik.Win32.93152]
4b543e8b3219e229e4e919e08a26b57a	[Win32/Ramnit.SPVQQRD] [Trojan.Lebag.A] [Trojan.Lebag-13] [Trojan.Starter.1591] [W32/Katusha.O!tr] [Citem.ETN] [Trojan.Win32.Lebag] [winpe/Ramnit.AM] [Mal/Autorun-AP] [TROJ_KRYPTK.SMUJ] [Trojan.Lebag] [Trojan.Kryptik.Win32.96475]
1ec48b794231b7a0cb9692029952d56d	[W32.Vetor.PE] [W32.Virut.G] [Trojan.Spy.Zbot] [Virus.Virut.Win32.1938] [W32/A-9d2e1bd6!Eldorado] [W32.Ramnit.B] [PE_VIRUX.R] [Win32:Vitro] [Win.Trojan.Lebag-4] [Virus.Win32.Virut.ce] [Virus.Win32.Virut.hpeg] [Win32.Virut.AM[h]] [Virus.Win32.Virut.CE] [Win32.Virut.56] [PE_VIRUX.R] [BehavesLike.Win32.Worm.dc] [W32/Scribble-B] [W32/A-9d2e1bd6!Eldorado] [Win32/Virut.bt] [Virus/Win32.Virut.ce] [Win32.Virut.dd.368640] [Trojan:Win32/Ramnit] [Win32/Virut.F] [Virus.Virut.14] [W32/Sality.AO] [Win32/Virut.NBP] [PE:Trojan.Win32.Fednu.udz!1075350996] [Virus.Win32.Cryptor] [W32/Virut.CE] [Win32/Virut] [Virus.Win32.Virut.$NBP]
b15e6ddc025f98a74cfe5631c7174120
60beefb2691df1f62fc510ea1b45ae3c	[Win32.Ramnit.N] [Virus/W32.SpyEye] [W32.Ramnit.A] [W32/Ramnit.a] [Virus.Ramnit] [Virus] [Virus] [Virus.Win32.Nimnul.bmnup] [W32/Ramnit.E] [W32.Ramnit.B!inf] [Win32/Ramnit.C] [PE_RAMNIT.DEN] [Win32:RmnDrp] [W32.Ramnit-1] [Virus.Win32.Nimnul.a] [Win32.Ramnit.N] [W32/Ramnit-A] [Virus.Win32.Ramnit.K] [Win32.Ramnit.N] [Win32.Rmnet.8] [W32/Ramnit.C] [PE_RAMNIT.DEN] [Heuristic.LooksLike.Win32.SuspiciousPE.J] [Win32/IRCNite.wi] [Win32.Ramnit.lx.30720] [Virus:Win32/Ramnit.V] [Win32.Nimnul.A] [Win32/Ramnit.N] [Win32.Ramnit.N] [W32/Ramnit.E] [Virus.Win32.Nimnul.b] [Malware.Ramnit] [Win32/Ramnit.H] [Win32.Mgr.a] [Virus.Win32.Nimnul] [W32/Ramnit.C] [Win32/Zbot.G] [W32/Nimnul.A]

Whois

Property	Value
Email	fergerer@yahoo.com
NameServer	NS2.SUSPENDED-DOMIAN.COM
Created	2011-04-03 00:00:00
Changed	2015-04-08 00:00:00
Expires	2016-04-03 00:00:00
Registrar	BIGROCK SOLUTIONS LI

DNS Resolutions

Date	IP Address
2013-05-14	96.126.114.18 (ClassC)
2014-08-18	198.74.50.135 (ClassC)
2017-11-27	198.74.50.135 (ClassC)
2024-12-15	43.240.239.73 (ClassC)
2025-03-26	43.240.239.82 (ClassC)
2025-04-11	45.114.105.165 (ClassC)

Port 80

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]