Help RSS API Feed Maltego Contact

Domain > s12.com.br

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to s12.com.br

MD5	A/V
63a55e8375bfc5e4bf668c72cf837db4	[W32.HfsReno.7bad] [Packed.Win32.Klone!O] [RDN/PWS-Banker!dg] [WS.Reputation.1] [TR/Dldr.Banload.awt.2] [TrojanDownloader:Win32/Banload.AWT] [TrojanDownloader.Banload] [Trojan-Downloader.Banload2] [Downloader.Banload2.LOV] [Trj/CI.A] [Win32/Trojan.155]
97f2d892acc0039a8ee34409564d21c0
d4206840b6781fc0d4adfa5a084d23b8	[HW32.CDB.Df87] [TrojanDownloader.Banload.r3] [RDN/PWS-Banker!dg] [W32/Trojan3.IPX] [Banload.CYHQ] [TROJ_BANLOAD.XGF] [UnclassifiedMalware] [Trojan.PWS.Banker1.14162] [TR/Dldr.Banload.TQP] [Troj/Banloa-VI] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Banload.AWT] [W32/Trojan.WKFJ-3797] [TrojanDownloader.Banload] [Win32.SuspectCrc] [W32/Banload.TQP!tr.dldr] [Downloader.Banload2.LOV] [Trj/CI.A] [Win32/Trojan.05f] [Win32/DH{eYEMfSAkIiU2}] [Artemis!D4206840B678]
a47d9fe5ec2580d7b16a89ab33313f2d	[Win32/DH{gQx9ICQiJTaBEjk}]
02efac65459652e56697e2964da5f856	[Trojan-Spy.Bancos] [Trojan.Win32.Banload.BTQP]
89905ec18588f75f294f32e61d80d68f	[Artemis!89905EC18588] [Trojan.Banker.DE] [Adware.InstallCore.53] [Win32.Troj.Undef.(kcloud)] [W32/Banload.TQP!tr.dldr] [Downloader.Banload2.MBL]
17e346e4f2ec3d94cd27aad2e5b18975	[Artemis!17E346E4F2EC] [Trojan.Banker.FA] [UnclassifiedMalware] [TR/Symmi.42954.3] [Troj/Bancos-BYZ] [W32/Trojan.FJIA-8473] [Trojan/Win32.Banload] [Trojan-Downloader.Banload2] [Downloader.Banload2.MCX] [Win32/Trojan.89a] [W32/Trojan.KCAD-3042]
5c9aba6ea70147cfdc196b4ca5451ca1	[Trojan.PWS.Banker1.14297] [Trojan-Spy.Bancos] [Downloader.Banload2.NFA]
7d91af840c5a109b81f75b51529ea909	[Trojan.Banker] [WS.Reputation.1] [Trojan-Downloader.Win32.Banload.hgji] [Trojan.Win32.Banload.bTQP] [Trojan-Spy.Bancos] [Downloader.Banload2.NAW]
ec7e49b669b57d45dd25048b550f8106	[HW32.CDB.Dac4] [Artemis!EC7E49B669B5] [WS.Reputation.1] [Trojan/Win32.Banload] [Downloader.Banload2.MIR] [Win32/Trojan.16f]
5b738c653424592a157b0028c8b864c4	[Trojan.Banker.DE]
89f9d58b6e696d7da9934c502d357d5c	[RDN/PWS-Banker.dldr!f] [Trojan.Banker.DE] [UnclassifiedMalware] [Adware.InstallCore.53] [TR/Symmi.42792.10] [Artemis!89F9D58B6E69] [Troj/DwnLdr-LRE] [Win32.Troj.Undef.(kcloud)] [W32/Trojan.LVWL-3886] [Trojan-Downloader.Banload2] [W32/Banload.LRE!tr] [Downloader.Banload2.MBL] [Win32/Trojan.f67]
015ac8c69b78b83a21ce965d1ddc6e68	[HW32.CDB.523b] [Artemis!015AC8C69B78] [Trojan.Downloader.Banload] [TR/Dldr.Banload.TQP.2] [Win32.Troj.Undef.(kcloud)] [W32/Trojan.UHAD-2595] [Downloader.Banload2.LZZ] [Trojan.Win32.Banload.BTQP]

Whois

Property	Value
Email	mail-abuse@cert.br
NameServer	ns2.s12.com.br 184.173.252.60
Created	20020801 #925353
Changed	2015-07-07 00:00:00
Expires	2016-08-01 00:00:00

DNS Resolutions

Date	IP Address
2011-06-17	74.54.89.194 (ClassC)
2015-01-22	67.228.185.122 (ClassC)
2026-01-07	172.67.130.36 (ClassC)
2026-01-30	104.21.3.29 (ClassC)

Subdomains

Date	Domain	IP
webmail.s12.com.br	2025-12-05	104.21.3.29
geoip.s12.com.br	2014-06-16	209.62.61.250

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information