Domain > www.unser-mittelhessen.de

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to www.unser-mittelhessen.de

MD5	A/V
75d7fd2b09cce5260414f535024c977b	[Win32/Spy.Bancos.OOA] [Trojan.Win32.Cossta] [Troj/VBSpy-P]
41af7f9229d1abe42fa9ae1a6e397b5c	[Win32/Spy.Bancos.ACM] [Trojan.Win32.Cossta] [Trojan.VBInject!48DD] [Troj/VBSpy-P]
8a3aeb7747822447577d039a625106ff	[Trojan.DownLoader11.10551] [Win32/Spy.Bancos.OOA] [W32/Bancos.AAO!tr] [PSW.Banker6.BKNN] [Trojan.Win32.Cossta] [Trojan.Win32.Cossta.acgj] [Trojan*Win32/Dynamer!ac] [Trojan.VBInject!48DD]
4888e0fe26156d9d7778fc1568e6deef	[WS.Reputation.1] [Trojan.Win32.Cossta.acga] [PE:Trojan.VBInject!1.64FA] [Troj/VBSpy-P] [Artemis!4888E0FE2615] [Trojan/Win32.Cossta] [Trojan:Win32/Dynamer!ac] [Trojan.Win32.Bancos.bOOA] [Win32.Trojan.Cossta.Pdwi] [Trojan.Win32.Cossta] [W32/VBSpy.P!tr] [Win32/Trojan.Spy.bed] [TR/Dynamer.ac.971] [Trojan.DownLoader11.12475] [Win32/Spy.Bancos.OOA] [PSW.Banker6.BKOM] [Trojan.VBInject!48DD] [W32.SillyFDC]
0d4b77d2f1e46621b77552f840f5b273	[Trojan.DownLoader11.13119] [Win32/Spy.Bancos.AAO] [W32/Bancos.AAO!tr.spy] [PSW.Banker6.BLCE] [Trojan.Win32.Cossta] [Trojan.Win32.Cossta.acjg] [Trojan.VBInject!48DD] [Troj/VBSpy-P]
0dbe62634710e4f6b4f040636e0725dd	[W32.SillyFDC] [Trojan.Win32.Cossta.abxp] [Trojan.Cossta!+qtD/Gg0FPc] [UnclassifiedMalware] [Trojan.DownLoader9.59457] [TR/Kazy.247247.3] [Troj/VBSpy-P] [Trojan/Win32.Cossta] [Trojan:Win32/Dynamer!ac] [Trojan.Win32.S.Bancos.311296] [Trojan/Win32.Bancos] [TScope.Trojan.VB] [Trojan.Win32.Bancos.OOA] [PE:Trojan.VBInject!1.64FA] [Trojan.Win32.Cossta] [W32/Cossta.ABXP!tr] [PSW.Banker6.BIVB] [Win32/Trojan.Spy.bed] [Artemis!0DBE62634710] [Trj/CI.A]
040cbbcb09f5c784d7ffb3e5bb6e1f8b	[W32/S-89f55aff!Eldorado] [BDS/Simda.aomenoa] [Win32/Tnega.XAXV!suspicious] [Win32/Spy.Bancos.ACM] [W32/Bancos.ACMB!tr] [PSW.Banker6.BSEF] [Trojan.Win32.Cossta] [Trojan.Win32.Cossta.aexd] [PWS-FBXN!040CBBCB09F5] [Trojan*Win32/Dynamer!ac] [Trojan.VBInject!48DD] [Troj/VBSpy-P] [TScope.Trojan.VB]
2692860887213bde1523c365950b0b02	[Win32/Spy.Bancos.AAO] [W32/Bancos.AAO!tr] [PSW.Banker6.BLAY] [Trojan-PWS.Banker6] [Trojan.Win32.Cossta.acip] [Trojan.VBInject!48DD] [Troj/VBSpy-P] [Infostealer.Bancos]
110e93de63916128b32322846bf0b38d
baecf4ed888b4f71abf2be22439852c2
0656d117db19dfc3cb567d1f4fa6d164	[TR/Kazy.247247.15] [Trojan.DownLoader11.10231] [Win32/Spy.Bancos.OOA] [W32/Bancos.OOA!tr] [PSW.Banker6.BKNH] [Trojan.Win32.Cossta] [Trojan.Win32.Cossta.acfu] [RDN/PWS-Banker!df] [Trojan*Win32/Dynamer!ac] [Trojan.VBInject!48DD] [Troj/VBSpy-P] [W32.SillyFDC] [Trojan.Dyname.r3] [Trojan.Win32.Bancos.czbxgf] [TrojanSpy.Bancos!bvm6usGfS2Q] [Trojan.Win32.S.Bancos.311296.C] [Win32.Trojan.Cossta.Eeo] [Trojan.Cossta.Win32.8435] [Trojan/Win32.Cossta] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Bancos] [PE:Trojan.VBInject!1.64FA] [Trojan.Win32.Bancos.bOOA] [Win32/Trojan.311]
713943a380f58d3af19bb98c33488b73
5e2cfdaaa31986ae6cdc04b3b4112670	[W32/VB-Dialog-Spyer-based!Maxim] [BACKDOOR.Trojan] [Win32/Spy.Bancos.AAO] [W32/Cossta.ACDR!tr] [PSW.Banker6.BKAR] [Trojan.Win32.Cossta] [Trojan.Win32.Cossta.acdr] [Trojan.VBInject!48DD]
5aed3d9bfae2a9b70f72e65960b36541	[W32/VB-Dialog-Spyer-based!Maxim] [Trojan.DownLoader11.12311] [Win32/Spy.Bancos.AAO] [W32/Bancos.AAO!tr] [PSW.Banker6.BKTJ] [Trojan.Win32.Cossta] [Trojan.Win32.Cossta.achi] [Trojan.VBInject!48DD]
a161560d9587c6c506681ffb9f898632	[W32/VB-Dialog-Spyer-based!Maxim] [BACKDOOR.Trojan] [Win32/Spy.Bancos.AAO] [W32/Bancos.AAO!tr] [PSW.Banker6.BKKM] [Trojan.Win32.Cossta] [Trojan.Win32.Cossta.acfj] [RDN/PWS-Banker!df] [Trojan.VBInject!48DD] [Mal/VBCheMan-F]
42e81483913f6e83f664b07ad91039b6
c0d9e2d5666b7027ea5b686e4eb5061b

Whois

Property	Value
Email	hostmaster@serverkompetenz.de
NameServer	ns2.stratoserver.net
Changed	2011-03-10 14:46:02

DNS Resolutions

Date	IP Address
2013-04-01	85.214.252.31 (ClassC)
2013-04-01	81.169.185.147 (ClassC)
2014-05-21	85.214.252.31 (ClassC)
2018-06-21	85.214.243.46 (ClassC)
2018-09-25	72.52.4.119 (ClassC)
2018-09-29	185.53.178.8 (ClassC)
2018-12-08	176.9.83.229 (ClassC)
2019-03-11	185.53.178.7 (ClassC)
2019-09-06	104.28.13.15 (ClassC)
2019-10-17	104.28.12.15 (ClassC)
2020-03-05	104.27.163.72 (ClassC)
2020-05-02	104.27.162.72 (ClassC)
2020-07-04	185.253.212.22 (ClassC)
2020-09-13	51.255.113.165 (ClassC)
2021-02-04	149.202.117.224 (ClassC)
2021-08-05	64.190.62.111 (ClassC)
2022-05-01	64.190.63.111 (ClassC)
2024-10-21	15.197.148.33 (ClassC)
2024-11-24	3.33.130.190 (ClassC)
2026-01-28	159.89.214.161 (ClassC)

Subdomains

Date	Domain	IP
www.unser-mittelhessen.de	2013-04-01	81.169.185.147

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]