Help RSS API Feed Maltego Contact                        

Domain > ria-ru.xicp.net

Welcome! Right click nodes and scroll the mouse to navigate the graph.
This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?

Most users have voted this as MALICIOUS

Reports

https://otx.alienvault.com/pulse/56aa6c6e67db8c6aa...    
https://www.proofpoint.com/us/exploring-bergard-ol...    

Files that talk to ria-ru.xicp.net

MD5A/V
950c4074cf593ef87914d40bf1cfa3c7
2c7bad4f4a4df3025aa1345db27c7408[Trojan.MulDrop4.31630] [Win32/Korplug.AK] [W32/Korplug.AK] [SHeur4.BFFB] [Backdoor.Win32.Plugx] [Backdoor.Win32.Gulpix.rr] [Backdoor*Win32/Plugx.A] [Worm.Luder.Win32.168]

Whois

PropertyValue
Email yezi@oray.com
NameServer NS2.EXHERA.COM
Created 2001-08-15 00:00:00
Changed 2014-03-28 00:00:00
Expires 2015-08-15 00:00:00
Registrar SHANGHAI BEST ORAY I