Domain > rejoincomp2.in

This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?

Most users have voted this as MALICIOUS

Reports

http://researchcenter.paloaltonetworks.com/2017/01...

Files that talk to rejoincomp2.in

MD5	A/V
03ad3c648793b872804a6111c1d96985
200467c1a10f8498712e40a892d798f1
1fc9de037194c677ac617cc3f4253c95
cc7b9a6f5007c7180756ad405587eb89
377a40c61aaaa03be6551835f3cbe1f6	[Trojan.Script.DLJ] [JS.Trojan-Downloader.Nemucod.im] [JS/Locky.AR] [JS/TrojanDownloader.Nemucod.ASH] [Trojan.Script.DLJ] [Trojan.Script.Heuristic-js.iacgm] [Js.Dldr.Locky!c] [Trojan.Script.DLJ] [Troj/JsDwnLdr-T] [Trojan.Script.DLJ] [BehavesLike.JS.ExploitBlacole.qx] [JS/Locky.AR] [JS/Dldr.Locky.111777] [Trojan.Script.DLJ] [Trojan.Script.DLJ] [Js.Trojan.Raas.Auto] [JS/Nemucod.ASB!tr.dldr]
61e091ab78a7b60bf4a2c9564b44b173	[Trojan.Script.DLJ] [Trojan.Script.DLJ] [JS/Locky.AR] [JS/TrojanDownloader.Nemucod.ASH] [Trojan.Script.DLJ] [Trojan.Script.Heuristic-js.iacgm] [Troj.Downloader.Script!c] [Trojan.Script.DLJ] [BehavesLike.JS.ExploitBlacole.qx] [JS/Locky.AR] [JS/Dldr.Locky.111777] [Trojan.Script.DLJ] [JS/Nemucod.ASB!tr.dldr]
a2b1424c704f3c460a9d905362e0906a
2c5d7580715309461d9102720096f27e
a34744a5ea9c844098694c27acca7ea5	[Trojan.Script.Heuristic-js.iacgm] [BehavesLike.JS.ExploitBlacole.qx]
5e791096b521e45ba8d12f17d25a6811	[Trojan.Script.Heuristic-js.iacgm] [BehavesLike.JS.ExploitBlacole.qx]
097e18195611f71d302a8e57cedd4b4c
d6942c2c1e3c75e43211782665574e16
d6c5f9e341d98d11279b239460e96cfb
3a1963539ffe79726729e26e63e4345b	[Trojan.Script.DLJ] [Trojan.Script.DLJ] [JS/Locky.AR] [JS/TrojanDownloader.Nemucod.ASH] [Trojan.Script.DLJ] [Trojan.Script.Heuristic-js.iacgm] [Trojan.Script.DLJ] [BehavesLike.JS.ExploitBlacole.qx] [Troj/JsDwnLdr-T] [JS/Locky.AR] [JS/Dldr.Locky.111777] [Trojan.Script.DLJ] [Js.Trojan.Raas.Auto] [JS/Nemucod.ASB!tr.dldr]
329a463e4e8985b06c7159de510df32e	[Trojan.Script.Heuristic-js.iacgm] [BehavesLike.JS.ExploitBlacole.qx]
89fe561606bed1b33a6199d0723c8154	[Trojan.Script.Heuristic-js.iacgm] [BehavesLike.JS.ExploitBlacole.qx] [Js.Trojan.Raas.Auto]
2dd7def58a56e34b4bcebc7d3ddafa68	[Trojan.Script.Heuristic-js.iacgm] [BehavesLike.JS.ExploitBlacole.qx]
45e7d75cc167947792ecc508101bc742
aed788c1d1c7558d831f1f115c6f3c28
e80042331c732f0dbe952f00536565c1	[JS/Locky.AR!Eldorado] [Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto] [JS/Locky.AR!Eldorado] [JS/Dldr.Locky.111777]

Whois

Property	Value
Name	Kara Turner
Organization	Not Applicable
Email	galicole@mail.com
Address	8302 Westown Pkwy Unit 6107
Zip Code	50266
City	West Des Moines
Country	US
Phone	+86.5153605811
NameServer	b.dnspod.com
Created	2016-08-23 12:08:49
Changed	2016-08-23 13:39:53
Expires	2017-08-23 12:08:49
Registrar	Endurance Domains Te