Domain > lovemydress.pl

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

http://ransomwaretracker.abuse.ch/feeds/csv/

https://otx.alienvault.com/pulse/56d9d25baef921042...

https://otx.alienvault.com/pulse/56e85de34637f24cb...

https://ransomwaretracker.abuse.ch/downloads/RW_UR...

https://blogs.sophos.com/2016/01/06/the-current-st...

https://ransomwaretracker.abuse.ch/tracker/online/

Files that talk to lovemydress.pl

MD5	A/V
e99cc598f0f3ede05514d1dea5904e51
f752e66e1d7dac62550940c5c9da21ae
1004c37c2f8f8f749bed4de6ea95eae6	[Virus.W32.Cryptor!c] [Win32/Cryptor]
7f9d68687b9c1f525ae38b86cc0bf4ec	[HW32.Packed.42E6] [Ransomware-FEB!7F9D68687B9C] [Ransom.TeslaCrypt] [RANSOM_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.bxj] [Trojan.Win32.TeslaCrypt.618496.A[h]] [Mal/Ransom-EC] [Trojan.Encoder.3962] [RANSOM_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.403866] [Ransom:Win32/Tescrypt!rfn] [Uds.Dangerousobject.Multi!c] [Trojan.Ransom.cryptolocker] [Trj/CryptoWall.C] [Win32/Filecoder.TeslaCrypt.I] [Trojan.Win32.Filecoder] [W32/Filecoder_TeslaCrypt.I!tr] [FileCryptor.HBF] [Trojan.Win32.TeslaCrypt.I]
38dba6cb2a155cd8602409442a6adcf4	[HW32.Packed.26F0] [RDN/Ransomware-FEB] [Ransom.TeslaCrypt] [Trojan.Win32.Encoder.eaieyo] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.SMJ5] [Uds.Dangerousobject.Multi!c] [Trojan.Encoder.3962] [BehavesLike.Win32.Expiro.jc] [Troj/TeslaC-Q] [TR/Crypt.Xpack.403866] [Ransom:Win32/Tescrypt!rfn] [Trojan.Win32.TeslaCrypt.618496.A[h]] [Trojan.Ransom.cryptolocker] [Trj/CryptoWall.C] [Win32/Filecoder.TeslaCrypt.I] [Trojan.Win32.Filecoder] [W32/Filecoder_TeslaCrypt.I!tr] [FileCryptor.HBF] [Trojan.Win32.TeslaCrypt.I]
3fd21c1f01c98ffd8d19dc79fa0c071a	[HW32.Packed.354A] [Ransom.TeslaCrypt] [Uds.Dangerousobject.Multi!c] [Ransom_CRYPTESLA.SMJ5] [Trojan-Banker.Win32.Shifu.bym] [Trojan.Encoder.3967] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [W32/CSOF!tr] [Trojan.CryptoLocker.29] [Ransom:Win32/Tescrypt.H] [Ransomware-FEB!3FD21C1F01C9] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
ca030bd92a4c08b84216a27f74dee555	[HW32.Packed.95FD] [Ransomware-FEB!CA030BD92A4C] [Ransom.TeslaCrypt] [Ransom_CRYPTESLA.YUYAHX] [Uds.Dangerousobject.Multi!c] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [PossibleThreat.P0] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
57b8c8ba3b4422c6b496d34850686bd8	[HW32.Packed.B4F7] [Ransomware-FEB!57B8C8BA3B44] [Trojan-Ransom.CryptoWall3]
fc62c263419e3c06bc1a92f857175554	[HW32.Packed.3191] [Ransomware-FEB!FC62C263419E] [Ransom.TeslaCrypt] [Ransom_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.byp] [Troj.Banker.W32.Shifu!c] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
9e22d8ef6d47de88da793c950cc60f27	[HW32.Packed.F16E] [Ransomware-FEB!9E22D8EF6D47] [Trojan-Ransom.CryptoWall3]
27c2307f2d8616e00ffaebc31d164a2a	[HW32.Packed.43F0] [Ransomware-FEB!27C2307F2D86] [Ransom.TeslaCrypt] [Ransom_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.byo] [Uds.Dangerousobject.Multi!c] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [PossibleThreat.P0] [Trojan[Banker]/Win32.Shifu] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
c85e536f9b5660420e385bad174ed4fb	[HW32.Packed.E915] [Ransomware-FEB!C85E536F9B56] [Trojan-Ransom.CryptoWall3]
0a9df3e6c831d88a9236f9f550e7a602	[HW32.Packed.A4C8] [Ransomware-FEB!0A9DF3E6C831] [Ransom.TeslaCrypt] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.byh] [Troj.Banker.W32.Shifu!c] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [Trojan[Banker]/Win32.Shifu] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan.Win32.Injector] [PossibleThreat.P0]
af03f27bd2ffea0fa9475ae27c9cba87
8fa0936b041b4fa6fae1db357f6d718c	[HW32.Packed.3680] [Ransomware-FEB!8FA0936B041B] [Ransom.TeslaCrypt] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAHX] [Uds.Dangerousobject.Multi!c] [Win32.Trojan.Crypt.Efbc] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3] [Trojan.Win32.Injector.CSOF]
fe9238739624c2698249d43a29c69573	[HW32.Packed.1A49] [Ransomware-FEB!FE9238739624] [Ransom.TeslaCrypt] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAHX] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Uds.Dangerousobject.Multi!c] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
ec65d7777ffaa66542745ccd838034c9	[HW32.Packed.42F2] [Ransomware-FEB!EC65D7777FFA] [Ransom.TeslaCrypt] [Ransom_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.byk] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [PossibleThreat.P0] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Troj.Banker.W32.Shifu!c] [Ransom:Win32/Tescrypt.H] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
a7cdf3f058d6c349182f4512b9584a38	[HW32.Packed.4E22] [Ransomware-FEB!A7CDF3F058D6] [Ransom.TeslaCrypt] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAHX] [Uds.Dangerousobject.Multi!c] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
24bedd4b805bf7fd9c460b9a5986ce48	[HW32.Packed.D58D] [Ransomware-FEB!24BEDD4B805B] [Ransom.TeslaCrypt] [Uds.Dangerousobject.Multi!c] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.byj] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [PossibleThreat.P0] [Trojan[Banker]/Win32.Shifu] [Ransom:Win32/Tescrypt.A] [Trojan.Win32.Injector] [Trj/TeslaCrypt.A]
2776e5b64d028b9ab89ab46ad2f8f7fe	[HW32.Packed.5704] [Ransomware-FEB!2776E5B64D02] [Ransom.TeslaCrypt] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAHX] [Uds.Dangerousobject.Multi!c] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [Trojan[Banker]/Win32.Shifu] [Ransom:Win32/Tescrypt.H] [Trojan-Ransom.CryptoWall3] [Trj/TeslaCrypt.A]

Whois

Property	Value
NameServer	dns2.home.pl
Created	2012.07.01 20:56:55
Changed	2015.06.06 18:16:52
Expires	2016.07.01 20:56:55
Registrar	home.pl S.A.