Domain > stun.voipbuster.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

https://otx.alienvault.com/pulse/55d2323d4637f2170...

https://pastebin.com/YTN2E70f

Files that talk to stun.voipbuster.com

MD5	A/V
32206ea7534debc3af5f0a0a9bd01f14	[Artemis!32206EA7534D] [Downloader] [TROJ_UPATRE.YYPY] [BehavesLike.Win32.BadFile.gh] [Packer.W32.Hrup] [Win32/Battdil.F] [Trojan.Win32.Battdil.bF] [Trojan.Staser.r3] [Spyware.Dyre] [Trojan.Win32.Staser.dgmwrs] [Infostealer.Dyranges] [Trojan.Win32.Staser.anug] [Win32.Trojan.Staser.Lgjg] [W32/Trojan.YUCX-3516] [TR/PSW.Dyzap.D.10] [Trojan/Win32.Staser] [PWS:Win32/Dyzap.D] [Trojan.Staser] [Trojan.Win32.Staser] [Trojan.Win32.Staser.aWB]
860ac28e0373dad2d20b4f93586f5996	[Upatre.FH] [Win32/TrojanDownloader.Waski.A]
735cb2b27dc560b2dde1b9f325a5a9e5	[Upatre.FE] [Virus.Win32.Heur.c] [BehavesLike.Win32.Autorun.nt] [Trojan.Upatre] [W32/Trojan3.MDH] [Downloader.Upatre] [Trojan-Downloader.Win32.Upatre.dyc] [TrojWare.Win32.TrojanDownloader.Waski.A] [Trojan.DownLoader11.42100] [TROJ_UPATRE.IZZ] [W32/Trojan.INYC-5228] [TR/Yarwi.A.50] [TrojanDownloader:Win32/Upatre] [Trojan.Win32.Waski.BF] [Win32/TrojanDownloader.Waski.F] [Trojan-Downloader.Win32.Upatre] [W32/Upatre.FH!tr] [Trj/Zbot.AC] [Trojan-Downloader:W32/Upatre.J] [TrojanDownloader.Upatre.r4] [Trojan.DL.Upatre!] [Trojan[Downloader]/Win32.Upatre] [Win32.Trojan-downloader.Upatre.Afro]
7e3e28320d209a586917668e3b8eac40	[HW32.Paked.7B4E] [Backdoor/W32.Androm.305152] [Backdoor.Androm.rw4] [Trojan.Malware.Packer] [Backdoor.Androm!pgYmpCS9JEM] [W32/Trojan.WZXE-5588] [Infostealer.Dyranges] [Win32/Tnega.AdELHSD] [TROJ_CROWTI.SMN2] [Backdoor.Win32.Androm.epjv] [Trojan.Win32.Androm.ddmbrw] [Backdoor.Win32.Androm.305152] [Win32.Backdoor.Androm.Ajcg] [UnclassifiedMalware] [Trojan.Dyre.1] [Backdoor.Androm.Win32.9955] [TROJ_SPNV.01GO14] [BehavesLike.Win32.PWSZbot.dh] [W32/Trojan3.JOI] [TR/Crypt.ZPACK.88506] [Trojan[Backdoor]/Win32.Androm] [Win32.Hack.Androm.ep.(kcloud)] [PWS:Win32/Dyzap.D] [Trojan/Win32.Zbot] [Backdoor.Androm] [Backdoor.Win32.Androm.AvGl] [Win32/Battdil.B] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.NaviPromo] [W32/Androm.EPJV!tr.bdr] [SHeur4.BYXA]
9d06ecfd821a697d93ca56d2a85d441e
cecbd9d84ae2f4b824a2b3d452e69b33	[Downloader-FSH!CECBD9D84AE2] [Upatre.FH] [BehavesLike.Win32.PWSZbot.mm] [Downloader.Upatre] [Trojan-Downloader:W32/Upatre.I] [TR/Yarwi.A.58] [Win32/TrojanDownloader.Waski.A] [Trojan-Downloader.Waski] [Trojan.Email.FakeDoc] [Win32.Malware!Drop] [W32/Trojan.UQOT-3735] [TROJ_UPATRE.YYRA] [Trojan-Downloader.Win32.Upatre.eee] [Trojan.DownLoader11.49081] [Troj/DwnLdr-LZZ] [W32/Trojan3.MPX] [TrojanDownloader:Win32/Upatre] [Trojan.Win32.Waski.bA] [W32/DwnLdr.LZZ!tr]
ea72fdea49c29d2dad65c522d5ef2c8d	[TrojanDownloader.Upatre.rw4] [RDN/Downloader.a!tp] [Trojan.Upatre] [Trojan.DL.Upatre!] [W32/Trojan3.LOK] [Upatre.FH] [Win32/Tnega.ADTaHbC] [TROJ_FRS.BMA000JR14] [Trojan-Downloader.Win32.Upatre.csy] [Trojan.Win32.Upatre.dhbruu] [Win32.Trojan-downloader.Upatre.Alsc] [TrojWare.Win32.UMal.~A] [Trojan-Downloader:W32/Upatre.E] [Trojan.Upatre.100] [Downloader.Upatre.Win32.83] [BehavesLike.Win32.Downloader.mm] [W32/Trojan.OLMN-6449] [TR/Rogue.pdau] [Trojan[Downloader]/Win32.Upatre] [TrojanDownloader:Win32/Upatre] [TrojanDownloader.Upatre] [Win32/TrojanDownloader.Waski.A] [Trojan-Downloade]
dfb56bd911f4080c76c5aca31f41d84b	[Upatre.FH] [BehavesLike.Win32.Downloader.mm] [W32/Trojan.YDSE-4442] [Win32.Outbreak]
bce9c422dbe36a4bc8d85e2a07f2e7f8	[Upatre.FH] [Trojan-Downloader:W32/Upatre.I] [BehavesLike.Win32.Autorun.mm] [TR/Rogue.14129.aib] [Artemis!BCE9C422DBE3] [Win32.Outbreak]
1897975e369f06a278fd85def1478eac	[TR/Crypt.EPACK.26247] [Win32/Battdil.I] [W32/Upatre.FT!tr] [Ransomer.EVL] [Trojan.Win32.Staser.bgxb] [Spyware.Dyre] [Upatre-FAAR!1897975E369F] [PWS*Win32/Dyzap.M] [Mal/EncPk-ANE] [BScope.Malware-Cryptor.Hlux]
01fc1473d10ef8c5545ec4933c633504	[Trojan.Downloader.UPT] [Downloader.Upatre] [Upatre.FH] [TROJ_UPATRE.GMRM] [Trojan-Downloader.Win32.Upatre.dvy] [Trojan.DownLoader11.40975] [Win32.Malware!Drop] [TR/ATRAPS.A.2117] [Trojan.Win32.Kryptik.BCPWM] [Trojan-Downloader.Waski]
c1beef54a4233b2397bccc9d4fd99aa5
46f7b4aaac2073838fa618d83936d375	[Upatre.FH]
f43e4cdbba26fba9f8374478e5e07588	[Artemis!6B9A7292F17B] [Trojan.Email.FakeDoc] [W32/Trojan.JLIS-2341] [Downloader.Upatre] [Trojan-Downloader.Win32.Upatre.clx] [Trojan.Upatre.100] [TROJ_DLOADR.YYMD] [Troj/Mdrop-GHU] [W32/Trojan3.LNQ] [TR/Visucius.82] [TrojanDownloader:Win32/Upatre.AF] [Trojan.Win32.Crypt] [W32/Kryptik.CNXO!tr] [Trojan.Win32.Upatre.cAF]
f92217ff5d3cbe8e33df34e409badfa8	[Trojan.Downloader.JRGB] [Trojan.Email.FakeDoc] [W32/Trojan3.MJC] [Downloader.Upatre] [Upatre.FH] [TROJ_UPATRE.WYI] [Trojan-Downloader.Win32.Upatre.ecr] [Trojan.DownLoader11.46399] [W32/Trojan.MIWA-1617] [TR/Kryptik.aita] [TrojanDownloader:Win32/Upatre.BA] [Win32/TrojanDownloader.Waski.A] [Trojan-Downloader.Waski] [W32/Kryptik.CRAR!tr] [Trojan.Win32.Waski.bA]
6d78432c8a2b75cdcad147ac0066f4da	[Upatre.FH] [Win32.Outbreak]
0df753bdbb1b6e27cc219c673b934639	[HB_Arkam] [Virus.Win32.Heur.c] [Artemis!0DF753BDBB1B] [Win32.Outbreak] [Trojan/W32.Staser.39936.E] [TrojanDownloader.Upatre.AA3] [Trojan.Email.FakeDoc] [Trojan.Staser.Win32.2664] [Trojan.Win32.Staser.dkoddc] [W32/Trojan3.MVI] [Downloader.Upatre] [Upatre.FN] [Win32/Upatre.PQFcXbB] [TROJ_UPATRE.LDK] [Trojan.Win32.Staser.asxs] [Trojan.Staser!] [Trojan.Win32.A.Staser.39936.D[h]] [Troj/Upatre-HB] [TrojWare.Win32.UMal.~A] [Trojan.DownLoader11.48965] [Win32.Malware!Drop] [W32/Trojan.CFSB-2231] [Trojan/Staser.aex] [TR/Crypt.Xpack.116724] [Trojan/Win32.Staser] [TrojanDownloader:Win32/Upatre.AJ] [Trojan/Win32.Waski] [Trojan.Staser] [Win32/TrojanDownloader.Waski.F] [Trojan.Win32.Staser] [W32/DwnLdr.LZZ!tr] [Luhe.Fi]
1b0639aaee950ab877bc3e57bca1592e	[Upatre.FH] [Mal/DrodZp-A] [Artemis!6AC3CA86E0AF] [Win32.Malware!Drop] [Downloader.Upatre] [Trojan-Downloader.Win32.Upatre.ehc] [Trojan.DownLoader11.52584] [TROJ_UPATRE.LMSA] [W32/Trojan.JDTU-4961] [TR/Yarwi.A.61] [TrojanDownloader:Win32/Upatre.AF] [Win32/TrojanDownloader.Waski.A] [Trojan-Downloader.Win32.Upatre]
c4f66eeb41777b2aaff4df8bacb11f4d
3f0eb4b48d0f89e43103f9edde2af189	[Upatre-FAAA!0ECE44BD85D8] [Trojan.Upatre] [Win32.Malware!Drop] [Downloader.Upatre] [Trojan.Upatre.100] [Win32/TrojanDownloader.Waski.A] [Trojan-Spy.Zbot] [Trojan.Win32.Waski.bA]

Whois

Property	Value
Name	Dellmont SARL
Organization	Dellmont SARL
Email	no.valid.email@worldnic.com
Address	PO Box 201
Zip Code	L-2012
City	Luxembourg
State	LU
Country	LU
Phone	+35220992536
NameServer	NS3.FINAREA.CH
Created	2005-03-07 12:20:15
Changed	2015-01-29 00:07:22
Expires	2018-03-07 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2013-08-12	77.72.174.165 (ClassC)
2014-08-05	77.72.174.167 (ClassC)
2014-09-30	77.72.174.165 (ClassC)
2014-09-30	77.72.174.161 (ClassC)
2014-10-08	77.72.174.167 (ClassC)
2014-10-23	77.72.174.163 (ClassC)
2015-02-02	77.72.174.163 (ClassC)
2015-04-08	77.72.169.165 (ClassC)
2015-04-08	77.72.169.167 (ClassC)
2025-09-12	77.72.169.210 (ClassC)
2025-12-07	77.72.169.213 (ClassC)
2025-12-11	77.72.169.211 (ClassC)
2026-01-04	77.72.169.212 (ClassC)

Subdomains

Date	Domain	IP
stun.voipbuster.com	2015-02-02	77.72.174.163
client.voipbuster.com	2025-05-19	77.72.169.32
www.voipbuster.com	2025-01-28	77.72.169.20

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]