Domain > m0ntecrist0.co.ve

This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?

Most users have voted this as MALICIOUS

Reports

http://blog.trendmicro.com/trendlabs-security-inte...

http://documents.trendmicro.com/assets/Operation B...

http://documents.trendmicro.com/assets/Operation%2...

http://documents.trendmicro.com/assets/Operation_B...

https://otx.alienvault.com/pulse/5674426c4637f2563...

Files that talk to m0ntecrist0.co.ve

MD5	A/V
4b87dd327717c6c7b1617b5ac60375e7	[Trojan.Injector.AutoIt] [Win32/Spatet.A] [Trojan.Win32.Llac.kgkt] [BackDoor.Cybergate.1] [BehavesLike.Win32.Dropper.tc] [Trojan.Heur.AutoIT.112] [Artemis!4B87DD327717] [Trojan.Win32.Llac.kgkt] [Trojan.SuspectCRC]
70dae7a3ff8c61663bc1256947359e41	[Trojan.Heur.AutoIT.112]
bfe5b75975ab8d3852a39f7b642eb681	[Trojan.Heur.AutoIT.112]
5de9fafef432ac660616efaf27f26d5e
862a3482e658956ca49a9b2c15ff1f5d
2c8b55c16e27136616b9b8e7d4a51b63
9922563499d50002341e6eeec0321eb9
a61f7fb3dd2dcfe434d4c73d397e7824
f5297b5dbd6e3f66a05e9bdcdcb60e8d	[Artemis!F5297B5DBD6E] [Suspicious.Cloud.2] [Trojan.Win32.Llac.kher] [Win32.Trojan.Llac.Eawn] [BehavesLike.Win32.Autorun.tc] [Trojan.Heur.AutoIT.112] [Worm:Win32/Rebhip] [Trojan.Win32.Llac.kher] [W32/Llac.KHER!tr] [Autoit2_c.GJ] [Trj/CI.A]
edc42cc054e4849e04dd0c798a68c126
67bbb20d645a2d0465deb3c58cd5d0b6
a8740bc3b99a16b6eb8ab66bf14bdaf1
429407a510ba0ff7602262bb86f6423a	[HW32.Packed.F4FC] [Trojan.Win32.SpyNet.dzdoxl] [TROJ_DYER.BMC] [Trojan.Win32.Llac.khfn] [Win32.HLLW.SpyNet.233] [TROJ_DYER.BMC] [BehavesLike.Win32.Backdoor.dc] [W32/Trojan.GPMM-7912] [Worm:Win32/Rebhip] [Artemis!7226AA7C1E3F] [Hacktool.Win32.Autoit.R] [W32/Llac.KHFK!tr] [Trj/CI.A]
659d94b87ddc8b3c9f85d60f0ac310cf
dae724b6c036b60d7e8887e286af4d99
47e3ea7f07b7a2169a2841975282db0e
edf2df82dfad3d2f0cb3b42c62365964
04b1271971f4696ad6407acf88292187	[Trojan.MSI.g4] [Trojan.Dropper] [Trojan.Win32.FakeAV.bdkdze] [Trojan-Ransom.Win32.Blocker.hrft] [Trojan.Yakes!7mgl5KdsP38] [BackDoor.Comet.152] [BehavesLike.Win32.PWSZbot.rc] [Troj/MDrop-GWI] [W32/Trojan.EMKL-8373] [Backdoor/DarkKomet.kwk] [TR/Crypt.Xpack.358806] [Trojan/Win32.Yakes] [TrojanDropper:Win32/Effbee.A] [Backdoor/Win32.DarkKomet] [Win32/Tnega.RfCSaJB] [Hoax.Blocker] [Trojan.Crypt.XPACK] [W32/Dropper.PYN!tr]
d862701d3653cf56373ea84f49fc1603	[HW32.Packed.F4FC] [TROJ_GE.80D0E8E1] [Trojan.DR.FrauDrop!De87yIRM35E] [UnclassifiedMalware] [TROJ_GE.80D0E8E1] [TrojanDropper.FrauDrop.qcp] [MSIL/Injector.ZYT!tr] [Trojan[Dropper]/Win32.FrauDrop] [Trojan.Kazy.D336B5] [Backdoor:Win32/Fynloski.A] [Artemis!093D421B4296] [Backdoor.Win32.DarkKomet] [MSIL.ALNI]
ebbf6b0fa9ff2e871b41769a36b0d51a	[HW32.Packed.F4FC]

Whois

Property	Value
Organization	petrov.strong@yandex.com
Email	petrov.strong@yandex.com
Phone	0034-656412987
NameServer	ns2.m0ntecrist0.co.ve
Expires	2016-11-18 04:59:46