Domain > udpl.com.pk

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to udpl.com.pk

MD5	A/V
fdc4a89f056ad4983d72bb52cc52f71a	[Heuristic.LooksLike.Win32.Suspicious.J!81] [PE:Malware.FakePDF@CV!1.9C28]
28dc5175a5a8d8b3a386a42c0b7400df	[TrojanDownloader.Upatre.A6] [Downloader-FZW!28DC5175A5A8] [Trojan.Injector.RRE] [Trojan/Downloader.Waski.a] [Trojan.Win32.DownLoad3.csratn] [W32/Trojan3.HFI] [Trojan.Zbot] [Win32/TrojanDownloader.Waski.A] [TROJ_UPATRE.SMZ3] [Win.Trojan.Bublik-412] [Trojan.Bublik!uCcYBvXjKC4] [Trojan.DownLoad3.28161] [TROJ_UPATRE.SMZ3] [BehavesLike.Win32.PWSZbot.mm] [Troj/Kryptik-CF] [W32/Trojan.AOLW-5822] [Trojan/Bublik.ljo] [Trojan/Win32.Bublik] [TrojanDownloader:Win32/Upatre.A] [Trojan/Win32.Waski] [Win32/Upatre.VXHQPNB] [Trojan.Waski.A] [Trojan-Spy.Zbot] [W32/Kryptik.CF!tr] [Zbot.FBP]
311e3bd582099124b37fd2f7c06124b2	[Win32/Upatre.VXHQPNB] [Downloader-FZW!311E3BD58209] [TR/Yarwi.A.23] [Trojan.8327C8540D19D432] [Win32/TrojanDownloader.Waski.A] [Zbot.FBP] [Trojan.Zbot] [W32/Kryptik.CF!tr] [TrojanDownloader*Win32/Upatre.A] [Trojan.Inject.RRE] [W32/Trojan.AOLW-5822] [W32/Trojan3.HFI] [Trojan-Spy.Zbot] [Trojan.Bublik.Win32.12926] [TROJ_UPATRE.SMZ3] [Troj/Kryptik-CF] [TrojanDownloader.Upatre.A6] [Win.Trojan.Bublik-412] [Trojan.DownLoad3.28161]
77af4bb5fcbf10bddf3db0212718693b	[Downloader-FZW!77AF4BB5FCBF] [TR/Yarwi.A.23] [Trojan.8327C8540D19D432] [Win32/TrojanDownloader.Waski.A] [Zbot.FBP] [Trojan.Zbot] [W32/Kryptik.CF!tr] [TrojanDownloader*Win32/Upatre.A] [Trojan.Inject.RRE] [W32/Trojan.AOLW-5822] [W32/Trojan3.HFI] [Trojan-Spy.Zbot] [Trojan.Bublik.Win32.12926] [TROJ_UPATRE.SMZ3] [Troj/Kryptik-CF] [TrojanDownloader.Upatre.A6] [Win.Trojan.Bublik-412] [Trojan.DownLoad3.28161] [Win32/Upatre.VXHQPNB]
d099ecba8f09a247d9844914b5454a7d	[Win32/Upatre.VXHQPNB] [Downloader-FZW!D099ECBA8F09] [TR/Yarwi.A.23] [Trojan.8327C8540D19D432] [Win32/TrojanDownloader.Waski.A] [Zbot.FBP] [Trojan.Zbot] [W32/Kryptik.CF!tr] [TrojanDownloader*Win32/Upatre.A] [Trojan.Inject.RRE] [W32/Trojan.AOLW-5822] [W32/Trojan3.HFI] [Trojan-Spy.Zbot] [Trojan.Bublik.Win32.12926] [TROJ_UPATRE.SMZ3] [Troj/Kryptik-CF] [TrojanDownloader.Upatre.A6] [Win.Trojan.Bublik-412] [Trojan.DownLoad3.28161]
c69c44d8f89bdec393afc0b034fd8a6f	[Trojan.DownLoad3.28161] [Downloader-FZW!C69C44D8F89B] [Trojan-Spy.Zbot] [Win32/Upatre.VXHQPNB] [Trojan.Bublik.Win32.12926] [Trojan.Zbot] [W32/Kryptik.CF!tr] [Troj/Kryptik-CF] [Win32/TrojanDownloader.Waski.A] [Trojan.Inject.RRE] [TROJ_UPATRE.SMZ3] [Win.Trojan.Bublik-412] [TR/Yarwi.A.23] [W32/Trojan.AOLW-5822] [W32/Trojan3.HFI] [Zbot.FBP] [TrojanDownloader.Upatre.A6] [Trojan.8327C8540D19D432]
1de5990b593e319eb016df03c2e1f5d8	[Downloader-FZW!1DE5990B593E] [TR/Yarwi.A.23] [Trojan.8327C8540D19D432] [Win32/TrojanDownloader.Waski.A] [Zbot.FBP] [Trojan.Zbot] [W32/Kryptik.CF!tr] [TrojanDownloader*Win32/Upatre.A] [Trojan.Inject.RRE] [W32/Trojan.AOLW-5822] [W32/Trojan3.HFI] [Trojan-Spy.Zbot] [Trojan.Bublik.Win32.12926] [TROJ_UPATRE.SMZ3] [Troj/Kryptik-CF] [TrojanDownloader.Upatre.A6] [Win.Trojan.Bublik-412] [Trojan.DownLoad3.28161] [Win32/Upatre.VXHQPNB]
c51a39f6b6e7bb2f1d470372261f57ea	[Win32/Upatre.VXHQPNB] [Downloader-FZW!C51A39F6B6E7] [TR/Yarwi.A.23] [Trojan.8327C8540D19D432] [Win32/TrojanDownloader.Waski.A] [Zbot.FBP] [Trojan.Zbot] [TrojanDownloader*Win32/Upatre.A] [Trojan.Injector.RRE] [W32/Trojan.AOLW-5822] [W32/Trojan3.HFI] [Trojan-Spy.Zbot] [Trojan.Bublik.Win32.12926] [TROJ_UPATRE.SMZ3] [Troj/Kryptik-CF] [TrojanDownloader.Upatre.A6] [Win.Trojan.Bublik-412] [Trojan.DownLoad3.28161]
bea70649eea41780770cd3601dbe4681	[Zbot.FBP] [TrojanDownloader.Upatre.A6] [Trojan-Spy.Zbot] [TR/Yarwi.A.23] [Win.Trojan.Bublik-412] [Trojan.Injector.RRE] [Trojan.DownLoad3.28161] [Downloader-FZW!BEA70649EEA4] [TrojanDownloader*Win32/Upatre.A] [Win32/TrojanDownloader.Waski.A] [Troj/Kryptik-CF] [W32/Kryptik.CF!tr] [Trojan.Zbot] [W32/Trojan.AOLW-5822] [TROJ_UPATRE.SMZ3] [W32/Trojan3.HFI] [Trojan.8327C8540D19D432] [Win32/Upatre.VXHQPNB] [Trojan.Bublik.Win32.12926]

Whois

Property	Value
Email	ashar@pknic.net.pk

DNS Resolutions

Date	IP Address
2014-01-20	72.9.158.244 (ClassC)
2019-06-12	66.219.22.103 (ClassC)
2019-10-08	34.215.3.188 (ClassC)
2019-12-13	66.219.22.10 (ClassC)
2021-02-24	66.219.22.158 (ClassC)
2024-12-23	63.32.18.178 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
www.udpl.com.pk	2024-08-27	63.32.18.178

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]