Help
RSS
API
Feed
Maltego
Contact
Domain > casper.bacguarp.com
×
Welcome!
Right click nodes and scroll the mouse to navigate the graph.
×
This indicator is
referenced
in AlienVault OTX pulse ""
Is this malicious?
Yes
No
Most users have voted this as
MALICIOUS
Reports
http://researchcenter.paloaltonetworks.com/2015/05...
https://otx.alienvault.com/pulse/5544b973b45ff5392...
Files that talk to casper.bacguarp.com
MD5
A/V
d9bc8bb9755d9927fa354b13f5b1c8e0
188bc7e4830572e60fc7b193d4ead4af
[
W32/Zegost.DFQK!tr.bdr
] [
SHeur4.CGOB
] [
Trojan.Dropper
] [
Backdoor.Win32.Zegost.dfqk
] [
Backdoor*Win32/Plugx.L
]
a3e5c4511c45973dff7dc146546407de
fa8788448a2ca47aa7db9beb694097cf
39416403e2e065e87b18d4ecbccc6a6d
b7fa32a8cd1988e61093d96600966831
d4fde7aaa7d72afd259367f3eccba3f8
4e7ff0c5078c3a71c0a60e222aa1faa4
f242be978bba670b03d3df68a30d01c1
[
W32/Trojan.YOQT-8430
] [
Win32/Korplug.DD
] [
W32/Zegost.AFEO!tr.bdr
] [
Backdoor.Win32.Zegost
] [
Backdoor.Win32.Zegost.afeo
] [
0x579e432e
] [
Backdoor.Zegost
]
2d873fed856501948470f284f1aeea0f
652d33dd59e5dbd6a191476efb086654
b85e318e59610846ffbfb1b7f76d31d7
6813d88b84933e5ea230294ddfadbc6f
4ce325995895f1511f1f3abc15cf2124
d75a79cfa13becab755e45cee246d998
ff3a9950147507743c312eec7e2a29ae
cf27af3c83454708367397ebf622d1d9
690b9e8a545c2dca2a49dce2a27fba07
4faf142d37ec6673c17df4654838920a
ba42b84391d2643b2956ca0059b01324
[
W32/Trojan.VPYJ-9368
] [
Win32/Korplug.DD
] [
W32/Zegost.AFDM!tr.bdr
] [
Trojan.SuspectCRC
] [
Backdoor.Win32.Zegost.afdm
] [
Trojan.Zbot
] [
Backdoor.Zegost
]
Whois
Property
Value
Email
wedgsdva@hotmail.com
NameServer
NS2FWZ.NAME.COM
Created
2011-06-08 00:00:00
Changed
2014-05-12 00:00:00
Expires
2015-06-08 00:00:00
Registrar
NAME.COM, INC.