Help RSS API Feed Maltego Contact                        

Domain > wen.ru

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to wen.ru
MD5A/V
ead240e750455c8e8bd202e4d39faa82[Trojan.Zbot.10192] [Trojan.Zbot.10192] [Trojan.Zbot.10192] [Trojan.Zbot.10192] [Trojan.Zbot.10192] [Trojan.Zbot.10192] [Trojan.Zbot.10192] [Trojan.MulDrop5.13451] [Trojan.Zbot.D27D0] [Worm:VBS/Jenxcus!lnk] [Trj/CI.A]
f24de5e9a441e27537ad5a1ffe1f6f3f
268f821d40d845cfb35a814a3ee75337[Win32.Worm.Autoit.a] [Suspicious.Cloud] [Win32/Autoit.MK] [Mal_OtorunP] [Win32:Sality] [Trojan-Downloader.Win32.AutoIt.agn] [Trojan.DownLoader13.33253] [Mal_OtorunP] [BehavesLike.Win32.YahLover.jh] [TrojanDownloader:Win32/Gasonen.A] [HEUR/Fakon.mwf] [Win32/FakeFLDR_i] [Worm.Win32.AutoIt] [Autoit]
62d12de44a2af8583852cde8e2ca6af0[W32.Clode7e.Trojan.b9a8] [Trojan.AutoIt.CMM] [Trojan.AutoIt.CMM] [Worm.AutoIt.Blafixel.A] [Trojan.AutoIt.CMM] [Win32.Worm.Autoit.a] [Win32/Autoit.MD] [Mal_OtorunP] [Trojan.Win32.Autoit.eot] [Trojan.Win32.DownLoader12.drravv] [Win32.Trojan.Fakedoc.Auto] [Trojan.AutoIt.CMM] [UnclassifiedMalware] [Trojan.AutoIt.CMM] [Trojan.DownLoader12.62709] [Trojan.Autoit.Win32.26227] [Mal_OtorunP] [BehavesLike.Win32.Yahlover.jh] [W32/Trojan.XGJD-1727] [Worm:Win32/Blafixel.A] [Trojan.AutoIt.CMM] [HEUR/Fakon.mwf] [Trojan.AutoIt.CMM] [Win32/FakeFLDR_i] [Trojan.AutoIt.CMM] [Trj/Chgt.O] [W32/Autoit.EOT!tr] [Autoit]
cf1864ee2441acfe389e2dd51199402c[W32.Clod43b.Trojan.a740] [Downloader.AutoIt.Win32.] [Troj.Downloader.W32.Autoit!c] [Trojan.Symmi.D10B62] [trojandropper.vbs.twexag.a] [Win32.Worm.Autoit.a] [Infostealer.Limitail] [Win32/FakeFLDR_i] [Mal_OtorunP] [Trojan-Downloader.Win32.AutoIt.agn] [Trojan.Win32.AutoIt.drlaim] [Win32.Trojan.Fakedoc.Auto] [UnclassifiedMalware] [Trojan.DownLoader13.33253] [Mal_OtorunP] [BehavesLike.Win32.Dropper.jh] [TrojanDownloader:Win32/Gasonen.A] [HEUR/Fakon.mwf] [Trojan.SuspectCRC] [W32/Autoit.MK!worm] [Autoit]

DNS Resolutions
DateIP Address
2009-07-1691.197.130.18 (ClassC)
2010-01-3091.189.80.71 (ClassC)
2011-03-0991.189.87.88 (ClassC)
2011-11-18178.218.210.187 (ClassC)
2012-02-16178.218.210.190 (ClassC)
2013-05-1577.222.59.179 (ClassC)
2013-08-24178.218.209.120 (ClassC)
2013-08-28176.9.39.210 (ClassC)
2013-11-11178.218.210.189 (ClassC)
2025-03-3051.38.158.31 (ClassC)

Port 80

Subdomains
DateDomainIP
ns1.wen.ru2025-01-2951.38.158.31
NS2.WEN.RU2025-03-0151.38.158.31
gzproswell53.wen.ru2015-05-16178.218.210.190
sweetiebelle.wen.ru2015-05-17178.218.210.190
www.oqwoqxeoqgfk.wen.ru2015-06-03178.218.210.190
sivaswap.wen.ru2014-11-18178.218.210.189
latestapps.wen.ru2015-06-03178.218.210.190
www.efkgoqeoqew.wen.ru2024-10-0951.38.158.31
www.oqggeeoqgx.wen.ru2025-03-1651.38.158.31
www.gzoqueoqgx.wen.ru2025-01-2451.38.158.31
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information