Domain > tow3r.info

This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?

Most users have voted this as MALICIOUS

Reports

http://paper.seebug.org/papers/APT/APT_CyberCrimin...

https://github.com/kbandla/APTnotes/blob/master/20...

Files that talk to tow3r.info

MD5	A/V
897414BDB9C75EDACB16CC55C6DEFD4A
D55D778C2AA03864EF8FB9AEEC9FD259
16494C204E6860A0143649A2E7A3F353
828489e2f1334bf3e27b3aad39cd5b00	[Spyware.14508] [W32/Trojan.YBPH-4179] [Trojan.Upload.52] [Backdoor.Win32.Hanove] [Backdoor*Win32/Hanove.A]
0b38f87841ed347cc2a5ffa510a1c8f6	[W32.Intesky.Trojan] [Spyware.14508] [Artemis!0B38F87841ED] [Infostealer] [Malware.QQJH] [Heur.Suspicious] [Trojan.Upload.52] [Trojan/Win32.Hanove] [W32/Trojan.VKER-3546] [Win32/Trojan.Spy.51c]
15552EBDC4EBE5B4D2F71AB2D2E574CB
7b9cc2aa6e2dd13eec37f1fcb4a74ea6	[W32.Clodbc9.Trojan.17ea] [Artemis!7B9CC2AA6E2D] [W32/MalwareF.ZWYX] [Infostealer] [Malware] [Win32/Tnega.ASPY] [Virus.Win32.Heur.l] [Trojan.DownLoader8.48144] [Win32.Troj.Undef.(kcloud)] [W32/Risk.QSOF-7386] [Trojan/Win32.Hanove] [Trojan.BAT.Zapchast] [Win32/Trojan.Spy.545]
cff2e20f9ec8e4cda4957ec3136bb9f9	[W32.Intesky.Trojan] [Spyware.14508] [Artemis!CFF2E20F9EC8] [Malware.QOYE] [Heur.Suspicious] [Trojan.Upload.52] [Trojan/Win32.Hanove] [W32/Spyware.RLHL-9336]
d67418ddd0df67b3f77581ebde2df269	[W32.Intesky.Trojan] [Spyware.14508] [Artemis!D67418DDD0DF] [Malware.RBQU] [Heur.Suspicious] [Trojan.Upload.52] [Trojan/Win32.Hanove] [W32/Spyware.OFIJ-4636] [W32/PWS_y.DKQ!tr]
93B30282870DA637A873A453BF549A2B
34A9C5B1A6555781650C0E22202F6469
82BBA197BC3F1A1E1F0AE0BA1DE16565
e3cf3b1d2a695b9b5046692a607c8b30	[W32.Intesky.Trojan] [Spyware.14508] [Artemis!E3CF3B1D2A69] [Malware.QPER] [Heur.Suspicious] [Trojan.Upload.52] [W32/Spyware.ILYU-5523]
8487320cec6a5bbc669b5a57cf0e9be6	[W32.Intesky.Trojan] [Spyware.14508] [Artemis!8487320CEC6A] [Malware.QQIS] [Heur.Suspicious] [Trojan.Upload.52]
E992DFC3DEDCF5E66B661DBC26FE932C
AA0444F2B59F550C594C5D56E348C0B4
E37F420F2C1D7AD862A6643585FD7EBF
ADD03405C76816122E8DE96336C9E84B
09947BA52932D10D3C859511A6D31E8F
FD99E21DA55CEDA46ED654C0175F6A58

Whois

Property	Value
Name	Authorized Representative
Organization	Kleissner Associates s.r.o.
Email	domains@virustracker.info
Address	Na strzi 1702/65
Zip Code	140 00
City	Praha
Country	CZ
Phone	+420.00000000
NameServer	ns2.dynadot.com
Created	2014-07-18 12:39:24
Changed	2014-09-16 22:32:16
Expires	2015-07-18 12:39:24
Registrar	Dynadot, LLC (R259-L