Domain > autoupdates.5gigs.net

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

https://securelist.com/files/2014/11/darkhotelappe...

Files that talk to autoupdates.5gigs.net

MD5	A/V
02f1bb57fd465f85ac035579b8d3e309	[W32/Risk.TZUY-3081] [Trojan.Botnetlog.1132] [RDN/Downloader.a!se] [TrojanDownloader*Win32/Garveep.B] [W32/AutoRun-BPO] [TROJ_SPNV.01BI14] [Trojan.Pincav]
98468dc64f9f8e08779c5ec35de26b06	[TrojanDownloader*Win32/Garveep.B]
12df4869b3a885d71c8e871f1a1b0fde	[Backdoor.Win32.Bredolab!O] [Trojan.Cossta] [Backdoor.Bredolab.Win32.6981] [virus.win32.xorer.z] [Win32.Trojan.WisdomEyes.16070401.9500.9872] [W32/MalwareF.NFYG] [Heur.AdvML.C] [Win32/LineZer0_i] [TROJ_GARVEEP.SM] [Backdoor.W32.Bredolab.ixa!c] [Win32.Backdoor.Bredolab.hdv] [Trojan.Botnetlog.1132] [TROJ_GARVEEP.SM] [BehavesLike.Win32.Dropper.dc] [W32/AutoRun-BPO] [W32/Risk.FKIR-6655] [Trojan/Pincav.hfv] [TrojanDownloader:Win32/Garveep.B] [Trojan/Win32.KeyLogger.C627276] [Artemis!12DF4869B3A8] [Trojan.Pincav] [Backdoor.Bredolab!ueABznHb91Y] [W32/Bredolab.IXA!tr.bdr] [Trj/CI.A] [Win32/Trojan.e6d]
4d840625c5ca9a4f1cbd35d4b1ca2452	[W32.HfsAutoA.8166] [Trojan]
3f39c6dea5311167cc7ff62befd4ea7e	[Trojan.DarkHotel.8] [trojandownloader.win32.recslurp.b] [Win32.Trojan.WisdomEyes.16070401.9500.9970] [Win32/Tnega.AIQSBLD] [TROJ_GARVEEP.SM] [Trojan.DownLoader3.9378] [TROJ_GARVEEP.SM] [BehavesLike.Win32.Downloader.mt] [Trojan/Win32.Unknown] [TrojanDownloader:Win32/Garveep.B] [Trojan/Win32.Amber.R5181] [Trojan.BadCert] [Win32/Trojan.e6d]

Whois

Property	Value
Email	ADMIN@X9HOSTING.COM
NameServer	NS2.GHIS.NET
Created	2009-03-24 00:00:00
Changed	2014-02-23 00:00:00
Expires	2015-03-24 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2018-04-05	209.200.154.38 (ClassC)
2018-04-27	209.200.154.50 (ClassC)
2018-09-09	162.222.213.195 (ClassC)
2018-10-31	207.244.67.138 (ClassC)
2018-11-04	162.222.213.197 (ClassC)
2018-11-28	162.222.213.198 (ClassC)
2018-12-12	162.222.213.196 (ClassC)
2018-12-18	162.210.199.65 (ClassC)
2019-01-09	162.210.199.85 (ClassC)
2019-01-12	207.244.67.139 (ClassC)
2019-02-15	5.79.68.110 (ClassC)
2019-02-15	37.48.65.154 (ClassC)
2019-02-20	162.210.195.122 (ClassC)
2019-03-15	5.79.68.107 (ClassC)
2019-04-05	109.201.133.56 (ClassC)
2019-04-13	207.244.65.58 (ClassC)
2019-04-22	109.201.133.69 (ClassC)
2019-05-08	37.48.65.145 (ClassC)
2019-05-27	162.210.195.123 (ClassC)
2019-07-03	162.210.199.87 (ClassC)
2019-07-10	109.201.133.68 (ClassC)
2019-07-28	37.48.65.144 (ClassC)
2019-08-30	78.41.204.37 (ClassC)
2019-09-09	209.126.123.11 (ClassC)
2019-10-05	37.48.65.136 (ClassC)
2020-02-27	95.211.75.16 (ClassC)
2020-03-03	109.201.133.54 (ClassC)
2020-03-03	162.210.195.111 (ClassC)
2020-03-03	207.244.67.173 (ClassC)
2020-03-04	207.244.67.174 (ClassC)
2020-03-05	162.222.213.199 (ClassC)
2020-05-29	109.201.135.44 (ClassC)
2020-06-14	207.244.67.172 (ClassC)
2020-06-15	199.115.115.119 (ClassC)
2020-07-22	95.211.75.10 (ClassC)
2020-07-27	96.47.230.67 (ClassC)
2020-09-26	109.201.135.45 (ClassC)
2020-09-27	199.115.115.118 (ClassC)
2020-09-29	5.79.68.108 (ClassC)
2020-09-29	96.47.230.69 (ClassC)
2020-11-08	37.48.65.153 (ClassC)
2020-11-19	185.107.56.192 (ClassC)
2021-05-20	185.107.56.195 (ClassC)
2021-05-20	192.157.56.139 (ClassC)
2021-06-25	192.157.56.141 (ClassC)
2021-08-11	74.63.241.29 (ClassC)
2021-09-10	185.107.56.54 (ClassC)
2021-09-13	185.107.56.193 (ClassC)
2022-04-08	74.63.241.23 (ClassC)
2022-05-01	96.47.230.70 (ClassC)
2022-07-06	82.192.82.228 (ClassC)
2022-07-08	74.63.241.19 (ClassC)
2022-07-08	185.107.56.53 (ClassC)
2022-07-09	74.63.241.26 (ClassC)
2022-07-09	96.47.230.68 (ClassC)
2022-07-12	82.192.82.226 (ClassC)
2022-07-26	74.63.241.22 (ClassC)
2022-07-26	74.63.241.25 (ClassC)
2022-08-14	81.171.28.46 (ClassC)
2022-08-15	81.171.28.44 (ClassC)
2022-08-15	23.82.12.35 (ClassC)
2022-08-16	23.82.12.36 (ClassC)
2022-09-05	81.171.28.45 (ClassC)
2022-10-20	23.82.12.34 (ClassC)
2023-12-12	162.210.196.168 (ClassC)
2024-02-07	162.210.196.166 (ClassC)
2024-02-16	185.107.56.52 (ClassC)
2024-04-02	74.63.241.20 (ClassC)
2024-05-13	69.162.95.5 (ClassC)
2024-06-24	69.162.95.6 (ClassC)
2024-07-27	37.48.65.143 (ClassC)
2024-08-13	69.162.95.2 (ClassC)
2024-09-01	162.210.196.167 (ClassC)
2024-09-26	74.63.241.21 (ClassC)
2024-09-29	185.107.56.194 (ClassC)
2024-10-15	74.63.241.27 (ClassC)
2024-11-01	37.48.65.155 (ClassC)
2024-11-12	192.157.56.140 (ClassC)
2025-01-22	192.157.56.142 (ClassC)
2025-02-27	199.115.116.216 (ClassC)
2025-03-17	74.63.241.24 (ClassC)
2025-03-20	74.63.241.30 (ClassC)
2025-03-25	75.2.18.233 (ClassC)
2025-04-05	37.48.65.152 (ClassC)
2025-04-09	82.192.82.225 (ClassC)
2025-04-14	185.107.56.55 (ClassC)
2025-04-17	82.192.82.227 (ClassC)

Subdomains

Date	Domain	IP
1001spiele.5gigs.net	2024-12-24	192.157.56.142
autoupdates.5gigs.net	2019-04-05	109.201.133.56

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]