Domain > stun.voxgratia.org

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

https://otx.alienvault.com/pulse/55d2323d4637f2170...

https://pastebin.com/YTN2E70f

Files that talk to stun.voxgratia.org

MD5	A/V
32206ea7534debc3af5f0a0a9bd01f14	[Artemis!32206EA7534D] [Downloader] [TROJ_UPATRE.YYPY] [BehavesLike.Win32.BadFile.gh] [Packer.W32.Hrup] [Win32/Battdil.F] [Trojan.Win32.Battdil.bF] [Trojan.Staser.r3] [Spyware.Dyre] [Trojan.Win32.Staser.dgmwrs] [Infostealer.Dyranges] [Trojan.Win32.Staser.anug] [Win32.Trojan.Staser.Lgjg] [W32/Trojan.YUCX-3516] [TR/PSW.Dyzap.D.10] [Trojan/Win32.Staser] [PWS:Win32/Dyzap.D] [Trojan.Staser] [Trojan.Win32.Staser] [Trojan.Win32.Staser.aWB]
cf572ef0f61f12b4ea6c92dab0ae8fe1	[Upatre.FH] [Trojan.Upatre] [Downloader.Upatre] [Trojan.Win32.Staser.asea] [Trojan-Downloader:W32/Upatre.I] [W32/Trojan.FQHH-6714] [Win32/TrojanDownloader.Waski.A] [Trojan-Spy.Zbot]
4a29a1f828c425b44140b27fbdd63032	[Trojan.Staser.r4] [Spyware.Dyre] [Trojan.Win32.Staser.dgyspg] [W32/Trojan.LTZQ-9087] [Infostealer.Dyranges] [Battdil.J] [TSPY_DYRE.VVB] [Trojan.Win32.Staser.aosn] [Win32.Trojan.Staser.Pciz] [UnclassifiedMalware] [Trojan.Staser.Win32.2272] [Trojan/Win32.Staser] [PWS:Win32/Dyzap.F] [Trojan.Win32.Staser] [W32/Kryptik.CNXB!tr] [SHeur4.CDEP] [Trojan.Win32.Staser.AA] [TROJ_CRYPTO.VVB] [Trojan.Win32.Crypt] [W32/Kryptik.CNSJ!tr] [Trojan.Win32.Staser.aE]
ee299b606ea2165a88a06c3347c0319b	[Downloader-FSH!EE299B606EA2] [Win32.Malware!Drop] [Downloader.Upatre] [TROJ_UPATRE.YYJS] [TR/Crypt.ZPACK.107729] [TrojanDownloader:Win32/Upatre.AF] [Troj.Spy.W32.Zbot] [Trojan.Win32.Waski.BA] [Win32/TrojanDownloader.Waski.A] [Trojan-Spy.Zbot] [W32/Kryptik.CMRK!tr] [Trojan-Downloader/W32.Upatre.22528] [TrojanDwnldr.Upatre.AA3] [Downloader.Upatre.Win32.56] [Trojan.Win32.Kryptik.dgjkkc] [W32/A-986f7f95!Eldorado] [Upatre.EP] [Win32/Upatre.dZMJXbD] [TROJ_UPATRE.YYJY] [Win.Trojan.Downloader-63737] [Trojan-Downloader.Win32.Upatre.btm] [Trojan.DL.Upatre!] [Trojan.Win32.S.Downloader.22528.S] [Trojan-Spy:W32/Zbot.BBMP] [Trojan.DownLoader11.36769] [Win32.Trojan-downloader.Upatre.Alin] [Trojan.W]
4bf94db53e0926e12d55685e4c1826aa	[Upatre.FH] [BehavesLike.Win32.Downloader.mm] [Trojan.Email.FakeDoc] [W32/Trojan3.MJC] [Downloader.Upatre] [Trojan-Downloader.Win32.Upatre.ecr] [Trojan.Downloader.JRGB] [Trojan.DownLoader11.46399] [W32/Trojan.MIWA-1617] [TR/Kryptik.aita] [TrojanDownloader:Win32/Upatre.BA] [Trojan.Win32.Waski.bA] [Win32/TrojanDownloader.Waski.A] [Trojan-Downloader.Waski] [W32/Kryptik.CRAR!tr] [Artemis!4BF94DB53E09] [W32/Trojan.PMUA-8677] [TROJ_UPATRE.WYI] [Trojan.Win32.Kryptik.BCRAR] [Win32/Upatre.SNDcGd] [TrojanDownloader.Upatre.rw3] [Win.Trojan.Downloader-64127] [Trojan-Downloader.Win32.Waski] [Trojan-Downloader*W32/Upatre.I] [Zbot.VKU] [Trojan-Downloader.Win32.Upatre]
5a0e6a8f6d3afd811a109df2e1ee727b	[Upatre.FH] [PE:Malware.FakePDF@CV!1.9C28] [BehavesLike.Win32.BadFile.pt] [Artemis!5A0E6A8F6D3A] [Win32/TrojanDownloader.Waski.A] [Trojan.Downloader.UPT] [W32/Trojan3.MTB] [Downloader.Upatre] [TROJ_UPATRE.YYRF] [Trojan-Downloader.Win32.Upatre.efq] [Trojan.DownLoader11.50479] [W32/Trojan.NZOA-4068] [TR/Kryptik.bwoy.6] [TrojanDownloader:Win32/Upatre] [Trojan.Win32.Upatre.aQ] [Win32.Outbreak] [Crypt3.BKGP] [Trojan-Downloader/W32.Upatre.43008] [Trojan.Downloader] [Trojan/Win32.Injecter] [Trj/CI.A] [Trojan.VBInject] [BehavesLike.Win32.Trojan.pt]
f32a1d069bb3d7cab6847da673676999	[Trojan.PWS.Dyzap.D] [Trojan.Dyre.43] [BehavesLike.Win32.CryptDoma.fc] [PWS:Win32/Dyzap.H] [W32/Battdil.I!tr]
32137484f085236c936be6a14d5a8356	[Artemis!CBF05A82BEF8] [Upatre.FN] [HB_Arkam] [Trojan.DownLoader11.53286] [Troj/Bredo-AJR] [Win32/TrojanDownloader.Waski.F] [Win32.Outbreak] [Trojan.Email.FakeDoc] [TROJ_UPATRE.YYRJ] [Trojan.Win32.Staser.atbw] [TR/Crypt.Xpack.117358] [TrojanDownloader:Win32/Upatre.AM]
53879fe4b430d1de9c91a8b795d5b174	[Trojan.Upatre] [W32/Trojan3.LOV] [Downloader.Upatre] [TROJ_UPATRE.KB] [Trojan-Downloader.Win32.Upatre.cvq] [Trojan.Downloader.JREO] [Troj.Spy.W32.Zbot] [Trojan.DownLoader11.38000] [Troj/Upatre-GL] [W32/Trojan.DPIO-4771] [TR/Rogue.pdav] [Win32.Malware!Drop] [Win32/TrojanDownloader.Waski.A] [Trojan-Spy.Zbot] [Crypt3.AZQN] [Trojan.Win32.Waski.BA] [Trojan-Downloader/W32.Upatre.20480.D] [Trojan.Win32.DownLoader11.dhbsbc] [Win32/Upatre.McSVDGD] [TrojWare.Win32.Kryptik.CNYX] [BehavesLike.Win32.Downloader.mm] [TrojanDownloader:Win32/Upatre.AF] [Trojan.Win32.A.Downloader.20480.BSK] [Trojan/Win32.Downloader] [Win32.Trojan-downloader.Upatre.Suxr] [W32/Upatre.CVQ!tr] [Trojan.Win32.Upatre.Aoc] [Trojan.Win32.Waski.bA] [Luhe.Fi]
13966bd0d5201bf854b21fae382d9ff2	[PE:Malware.XPACK-LNR/Heur!1.5594] [Trojan-Downloader.Kuluoz]
dfb56bd911f4080c76c5aca31f41d84b	[Upatre.FH] [BehavesLike.Win32.Downloader.mm] [W32/Trojan.YDSE-4442] [Win32.Outbreak]
ebd46b59cd0a8f4d47f33461a8e69aeb	[Win32.Malware!Drop] [Downloader.Upatre] [TROJ_UPATRE.JUW] [Trojan.Win32.Staser.asaa] [Trojan.DownLoader11.48965] [TrojanDownloader:Win32/Upatre] [Upatre-FAAJ!BADD639EC640] [BScope.Malware-Cryptor.Mystig] [Win32/TrojanDownloader.Waski.F] [Trojan-Downloader.Win32.Waski]
6c9857587eadf30f84780f81fe2df1a4	[HW32.Packed.3044] [Infostealer.Dyranges] [Trojan.Win32.Yakes.hdqw] [Win32.Trojan.Yakes.Wrqu] [TROJ_UPATRE.IZZ] [BehavesLike.Win32.Backdoor.fc] [TR/Crypt.Xpack.101128] [PWS:Win32/Dyzap.F] [Trojan.Win32.Kryptik.bCQHA] [Trojan.Win32.Yakes] [W32/Yakes.HDQW!tr] [Crypt3.BEUR] [Artemis!6C9857587EAD] [Trojan.Win32.Crypt]
fc98fc0317ad05d710f0d367b35169fb	[Packed.Win32.Katusha.3!O] [Zip.Suspect.WinDoubleExtension-zippwd-2] [Troj/Wonton-IX] [TR/ATRAPS.A.1765] [VirTool:Win32/Obfuscator.ALC] [Win32/TrojanDownloader.Waski.A]
c1beef54a4233b2397bccc9d4fd99aa5
d8b478b9251de3df379dbcf895eebcc6
4ba43f0b82f86efed437c8523f7a4dee	[Ransom.Crowti.A4] [Spyware.Dyre] [Backdoor.Androm.Win32.10172] [Trojan.Win32.Androm.ddieta] [Infostealer.Dyranges] [Win32/Tnega.SFFPWL] [BKDR_ANDROM.TFD805] [Backdoor.Win32.Androm.epmj] [Backdoor.Androm!VGj9+oYH5Us] [Win32.Backdoor.Androm.Pftk] [UnclassifiedMalware] [Trojan.Dyre.1] [Win32.Malware!Drop] [W32/Backdoor.FMLZ-3329] [Backdoor/Androm.fiy] [TR/Dyreza.A.1] [Trojan[Backdoor]/Win32.Androm] [Win32.Hack.Androm.ep.(kcloud)] [PWS:Win32/Dyzap.D] [Backdoor/Win32.Qadars] [Backdoor.Androm] [Backdoor.Win32.Androm.aRAF] [Win32/Battdil.B] [Backdoor.Win32.Androm] [W32/Androm.EPMJ!tr.bdr] [SHeur4.BZAZ] [Win32/Trojan.5b5]
708c6b4bdd5a687a684eda12ab0152ca	[Packed.Win32.Katusha.3!O] [Trojan-Downloader/W32.Upatre.22528.B] [TrojanDownloader.Upatre.r3] [RDN/Downloader.a!tn] [Trojan.Upatre] [Win32.Malware!Drop] [Trojan.Win32.Rogue.dgrboz] [W32/Trojan2.OLPK] [Downloader.Upatre] [Upatre.FG] [Win32/Upatre.ESLYTaC] [Trojan-Downloader.Win32.Upatre.ccb] [TrojWare.Win32.Kryptik.~RD] [Trojan.DownLoader11.37110] [TROJ_UPATRE.SMBF] [BehavesLike.Win32.Trojan.mm] [W32/Trojan.IZDD-5089] [TR/Rogue.141014.cpf] [TrojanDownloader:Win32/Upatre] [Win32/TrojanDownloader.Waski.A] [Win32.Trojan-downloader.Upatre.Afro] [Trojan-Downloader.Waski] [W32/Kryptik.CNKG!tr] [Zbot.PPY] [Trojan]
a45c07c0a9c60c36404fc970af6ebd07	[W32.HfsAutoA.26C4] [BehavesLike.Win32.MoonLight.pt] [Virus.Win32.Heur.c] [Trojan/W32.Staser.44032] [Trojan.Staser.r5] [Trojan.Email.FakeDoc] [Trojan.Win32.Staser.djrwxn] [W32/Trojan2.OMJL] [Downloader.Upatre] [Win32/Upatre.JYaDNOC] [TROJ_UPATRE.JGA] [Trojan.Win32.Staser.armm] [Trojan-Downloader:W32/Upatre.J] [Trojan.DownLoader11.46947] [W32/Trojan.FBCF-1781] [TR/Spy.ZBot.paww] [Trojan/Win32.Staser] [TrojanDownloader:Win32/Upatre] [Trojan/Win32.ZBot] [Upatre-FAAJ!A45C07C0A9C6] [Trojan.Win32.Staser.aek] [Win32/TrojanDownloader.Waski.F] [Win32.Trojan.Spy.Lkxg] [Trojan.Win32.Staser] [Win32.Outbreak]
10d4c949dc71009e5e5dad8ae3420a9f	[Upatre-FAAH!432718827A11] [W32/Trojan.YJIY-5058] [Upatre.FH] [TR/ATRAPS.A.2040] [Trojan-Downloader.Waski] [W32/Upatre.FH!tr] [Downloader-FSH!432718827A11] [Trojan.Upatre] [W32/Trojan3.MCL] [Downloader.Upatre] [Win32/Upatre.YBeUWIB] [Trojan-Downloader.Win32.Upatre.dxq] [TrojWare.Win32.Waski.~A] [Trojan-Downloader:W32/Upatre.I] [Trojan.DownLoader11.41444] [Win32.Malware!Drop] [TROJ_UPATRE.SOG] [Troj/Invo-Zip] [TrojanDownloader:Win32/Upatre] [Trj/Chgt.L] [Win32/TrojanDownloader.Waski.A] [Win32.Trojan-downloader.Upatre.Dxwu] [Trojan.Win32.Waski.bA] [Luhe.Fiha.A]

DNS Resolutions

Date	IP Address
2013-06-17	77.72.174.167 (ClassC)
2013-08-12	77.72.174.165 (ClassC)
2014-09-15	77.72.174.163 (ClassC)
2014-10-08	77.72.174.167 (ClassC)
2014-10-08	77.72.174.161 (ClassC)
2014-10-16	77.72.174.161 (ClassC)
2014-12-09	77.72.174.165 (ClassC)
2014-12-17	77.72.174.163 (ClassC)
2015-04-28	77.72.169.213 (ClassC)
2015-06-05	77.72.169.210 (ClassC)
2015-06-23	77.72.169.211 (ClassC)
2015-06-23	77.72.169.212 (ClassC)
2019-06-08	216.93.246.18 (ClassC)
2022-05-23	99.83.248.67 (ClassC)
2023-02-01	185.53.178.50 (ClassC)
2023-12-02	104.247.82.50 (ClassC)
2024-01-08	15.197.192.55 (ClassC)
2024-01-20	188.114.96.7 (ClassC)
2024-01-20	188.114.97.7 (ClassC)
2024-01-22	188.114.96.0 (ClassC)
2024-01-22	188.114.97.0 (ClassC)
2024-01-27	188.114.96.3 (ClassC)
2024-01-27	188.114.97.3 (ClassC)
2024-02-27	188.114.96.2 (ClassC)
2024-02-27	188.114.97.2 (ClassC)
2024-02-28	188.114.96.9 (ClassC)
2024-02-28	188.114.97.9 (ClassC)
2024-06-13	2606:4700:3034::ac43:b520 (ClassC)
2024-06-13	2606:4700:3036::6815:43d1 (ClassC)
2025-11-22	172.67.181.32 (ClassC)
2025-12-15	104.21.67.209 (ClassC)

Subdomains

Date	Domain	IP
stun.voxgratia.org	2015-04-28	77.72.169.213
www.voxgratia.org	2025-11-05	172.67.181.32

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]