Domain > demo2.master-pro.biz

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

http://blog.dynamoo.com/2016/02/malware-spam-scann...

https://otx.alienvault.com/pulse/56ce0d314637f20c7...

Files that talk to demo2.master-pro.biz

MD5	A/V
a73a81d0ef2e139044d608340c5e8eb5	[W97M.Downloader.AXD] [X97M/Downloader.azb] [W97M.Downloader.AXD] [W97M.Downloader] [X2KM_DRIDEX.YYSQU] [W2000M.Dldr.Rogue!c] [W97M.Downloader.AXD] [Troj/DocDl-BGD] [X97M.DownLoader.105] [X2KM_DRIDEX.YYSQU] [Trojan.RXSB-6] [W2000M/Dldr.Rogue.aipbyd] [TrojanDownloader:O97M/Bartallex] [HEUR.VBA.Trojan.d] [W97M.Downloader.AXD] [W97M/Downloader] [heur.macro.download.1i]
27b91195387b408b180a2e1fa646188e	[JS:Trojan.Script.CVY] [JS:Trojan.Script.CVY] [JS:Trojan.Script.CVY] [JS:Trojan.Script.CVY] [JS.Downloader] [JS_LOCKY.ED] [JS:Trojan.Script.CVY] [Troj/JsDldr-EJ] [Trojan-Downloader:JS/Dridex.W] [JS_LOCKY.ED] [JS/Locky.11] [JS:Trojan.Script.CVY] [JS/Downloader] [TrojanDownloader:JS/Locky.A] [JS/Locky.a] [JS:Trojan.Script.CVY]
0ae8b5dbaec531489e4066183304b6b6
bb011dd58464f6b0ef8bf21c4b048975
f3863274511ee774785e0a603ee8a3e3	[JS:Trojan.Script.CVY] [JS:Trojan.Script.CVY] [JS/Locky.a] [JS:Trojan.Script.CVY] [JS.Downloader] [JS_LOCKY.ED] [JS:Trojan.Script.CVY] [Js.Troj.Script!c] [JS:Trojan.Script.CVY] [Trojan-Downloader:JS/Dridex.W] [JS_LOCKY.ED] [Troj/JsDldr-EJ] [JS/Dridex.KI.1] [TrojanDownloader:JS/Locky.A] [JS/Downloader] [JS:Trojan.Script.CVY] [JS:Trojan.Script.CVY] [Win32.Trojan.Raas.Auto] [PossibleThreat.P0]
6966a85d04068451bb54c983a66aad26
6eb933ee5f1d80f4304de896f5fbed0d
1cbfeaa3b639239d2319e45f16bb881d	[JS/Locky.D!Eldorado] [Troj/JSDldr-EY] [JS/Locky.D!Eldorado] [HEUR.JS.Trojan.b] [JS/TrojanDownloader.Nemucod.GS] [Trojan-Downloader.Script.Locky]
ff415facaaf83dcec7d17e07577d5be0	[Trojan-Downloader:JS/Dridex.W] [JS/Locky.D!Camelot] [HEUR.JS.Trojan.b] [JS/Nemucod.df]
bf44d79e35641b80b4e1cbee9d5ba7b8

Whois

Property	Value
Name	alexey Myasnikov
Organization	alexey Myasnikov
Email	alexeinnn@ya.ru
Address	Gaugelia strit 2 kv 13
Zip Code	603139
City	Nizniy Novgorod
State	Nizniy Novgorod
Country	RU
Phone	+7.9200602402
Fax	+7.8312233238
NameServer	NS2.JINO.RU
Created	2014-03-15 08:01:07
Changed	2016-02-11 06:41:05
Expires	2017-03-14 23:59:59
Registrar	REGTIME LTD.