Domain > starsoftheworld.org

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

https://ransomwaretracker.abuse.ch/downloads/RW_UR...

https://blogs.sophos.com/2016/01/06/the-current-st...

Files that talk to starsoftheworld.org

MD5	A/V
aedf56ba63cedf327a989eb6bec42f68	[HW32.Packed.554F] [Win32.Trojan.WisdomEyes.151026.9950.9999] [BehavesLike.Win32.Virut.dc] [Suspect-AN!AEDF56BA63CE]
0850996917ea64535258f290a8e99bdb	[HW32.Packed.C700] [BehavesLike.Win32.Pate.dc] [Suspect-AN!0850996917EA]
c5077ae9e7ffced2f6d8244bdc160806	[HW32.Packed.C577] [Suspect-AN!C5077AE9E7FF] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9993] [Win32.Trojan.Raas.Auto] [BehavesLike.Win32.Expiro.dc]
b021762ef9d1d04e42b2b0b51df65fec	[HW32.Packed.F6DB] [Artemis!B021762EF9D1] [Ransom.TeslaCrypt] [BehavesLike.Win32.Expiro.dc]
3d8e08c99ec1f242d56b1742b7ae6424
7c194ef829fecf4e8327b41ab41f2d13	[Ransomware-FEJ!7C194EF829FE] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9999] [Trojan.Win32.Yakes.pkqo] [Trojan.AVKill.60834] [BehavesLike.Win32.Downloader.fh] [TR/Crypt.Xpack.bhwd] [Trojan/Win32.Yakes] [Troj.W32.Yakes!c] [Trj/Locky.A] [Crypt5.ATAR] [Win32/Trojan.ea1]
88e63a6e4d908dfa38ee7e068a1064a3
51f5c09e41c27e12660b69690f6a6a1e	[Trojan/W32.Ransom.364544.F] [Ransomware-FEJ!51F5C09E41C2] [Ransom.TeslaCrypt] [Packer.W32.Tpyn!c] [Win32.Trojan.WisdomEyes.151026.9950.9997] [Ransom_CRYPTESLA.SMJ9] [Packed.Win32.Tpyn] [Trojan.Win32.AVKill.ebfrta] [Win32.Trojan.Kryptik.Swuv] [Mal/Ransom-EG] [Trojan.AVKill.60640] [BehavesLike.Win32.Xiquitir.fh] [Trojan.Yakes.iis] [TR/Crypt.Xpack.suvo] [Trojan/Win32.Yakes] [Ransom:Win32/Tescrypt] [Trj/GdSda.A] [Trojan.Win32.Crypt] [Crypt5.ATEW] [Win32/Trojan.3ec]
747fb91a114262d1c56765a700c3a670	[W32.BadisoLTAAAC.Trojan] [Ransom.Teslacrypt.OL4] [Trojan.Ransom.TeslaCrypt] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9999] [Ransom_CRYPTESLA.CBQ163U] [Trojan.Win32.AVKill.ebgnhm] [Mal/Ransom-EG] [Trojan.AVKill.60903] [Ransom_CRYPTESLA.CBQ163U] [Ransomware-FEJ!747FB91A1142] [TR/Crypt.ZPACK.qlxl] [Ransom:Win32/Tescrypt!rfn] [Ransomware-FEJ!747FB91A1142] [Trj/GdSda.A] [Trojan.Win32.Crypt] [W32/Kryptik.EG!tr] [Crypt5.ATJQ]
fbce36ce7a8fa1d20f1eed47d3453f81	[HW32.Packed.52E0] [Ransomware-FHP!FBCE36CE7A8F] [Ransom.TeslaCrypt] [Troj.Crypt.Zpack!c] [Ransom_CRYPTESLA.CBQ163U] [Trojan-Ransom.Win32.Bitman.voh] [Trojan.Win32.AVKill.ebgjnc] [Trojan.AVKill.60873] [Ransom_CRYPTESLA.CBQ163U] [BehavesLike.Win32.Suspect.dc] [TR/Crypt.ZPACK.zuwh] [Trojan[Ransom]/Win32.Bitman] [Ransom:Win32/Tescrypt.R] [Trj/GdSda.A] [Win32.Trojan.Kryptik.Egyg] [W32/Kryptik.ESMM!tr] [Pakes2_c.CBGY]
a6007afd081917d795ffb026a8008237	[Trojan/W32.Ransom.372736.G] [Ransom.Teslacrypt.OL4] [Ransomware-FEJ!A6007AFD0819] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9999] [W32/Ransom.CNPF-3544] [Trojan.Cryptolocker.N] [Win32/Filecoder.TeslaCrypt.K] [Ransom_CRYPTESLA.YUYAKF] [Trojan.Win32.Yakes.pkqy] [Trojan.Win32.AVKill.ebffor] [Trojan.Win32.Z.Yakes.372736.P[h]] [Mal/Ransom-EG] [TrojWare.Win32.Ransom.Tescrypt.~RE] [Trojan.AVKill.60837] [Ransom_CRYPTESLA.YUYAKF] [Ransomware-FEJ!A6007AFD0819] [Trojan.Yakes.ihl] [TR/Crypt.Xpack.futg] [Trojan/Win32.Yakes] [Ransom:Win32/Tescrypt!rfn] [Troj.W32.Yakes!c] [Trj/GdSda.A] [Win32.Trojan.Yakes.Ljtg] [Trojan.Yakes!xkB0mPWgv2g] [Trojan.Win32.Crypt] [W32/Yakes.ESNJ!tr] [Crypt5.ATCH] [Win32/Trojan.deb]
b0409fd1e03c67668dcfc8fd2f6bbb58
ed9c2029ba535725e1ea95c55ea97731	[HW32.Packed.29EE] [Trojan.TeslaCrypt.EX] [Trojan/W32.Bitman.224768.B] [Ransom.TeslaCrypt.DK8] [Trojan.TeslaCrypt.EX] [Ransom.TeslaCrypt] [Trojan.TeslaCrypt.EX] [Trojan-Ransom.Win32.Bitman.vpj] [Trojan.TeslaCrypt.EX] [Trojan.Win32.AVKill.eblsrd] [Win32.Trojan.Bp-ransomware.Ejqz] [Trojan.TeslaCrypt.EX] [UnclassifiedMalware] [Trojan.TeslaCrypt.EX] [Trojan.AVKill.60640] [BehavesLike.Win32.Expiro.dc] [TR/Crypt.ZPACK.yvmm] [Trojan[Ransom]/Win32.Bitman] [Ransom:Win32/Tescrypt!rfn] [Trojan.Win32.TeslaCrypt.224768[h]] [Trojan.TeslaCrypt.EX] [Ransomware-FHO!ED9C2029BA53] [Trojan.Win32.Filecoder] [W32/Kryptik.ESMM!tr]
71e065f64eb3b10a2ab2b629e3ff1cae	[W32.KinazeAK.Trojan] [Ransom.Teslacrypt.OL4] [Ransomware-FEJ!71E065F64EB3] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9999] [W32/Teslacrypt.CP] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.CBQ163U] [Trojan.Win32.Yakes.pknx] [Trojan.Win32.AVKill.ebfoum] [Trojan.Win32.TeslaCrypt.368640.A[h]] [Mal/Ransom-EG] [Trojan.AVKill.60836] [Ransom_CRYPTESLA.CBQ163U] [Ransomware-FEJ!71E065F64EB3] [W32/Teslacrypt.HAFN-0122] [Trojan.Yakes.ihj] [TR/Crypt.Xpack.czjt] [Trojan/Win32.Yakes] [Ransom:Win32/Tescrypt.R] [Troj.W32.Yakes!c] [Trj/GdSda.A] [Trojan-Ransom.TeslaCrypt4] [W32/Kryptik.ESNJ!tr] [Crypt5.ATBY]
4a26a57b87f21e2dc3bb417d9c24be18	[HW32.Packed.3314] [Ransomware-FHO!4A26A57B87F2] [Ransom.TeslaCrypt] [Trojan-Ransom.Win32.Bitman.vdf] [Trojan.AVKill.60916] [BehavesLike.Win32.Expiro.dc] [TR/Crypt.ZPACK.obdv] [Trojan[Ransom]/Win32.Bitman] [Ransom:Win32/Tescrypt.A] [Trj/GdSda.A] [Trojan.Win32.Crypt] [W32/Kryptik.ESRN!tr] [Crypt5.ATND]

Whois

Property	Value
Name	RAHAMAN BABALOLA
Organization	INTERCONTINENTAL CONNECT AGENCY
Email	babalolar@gmail.com
Address	No 3,Baltic Crescent Off Danube Street
Zip Code	23409
City	Maitama
State	Abuja Capital Territ
Country	NG
Phone	+234.08033977461
NameServer	ns52.domaincontrol.com
Created	2013-12-02 13:44:38
Changed	2015-12-02 18:41:45
Expires	2016-12-02 13:44:38
Registrar	PDR Ltd. d/b/a Publi