Help RSS API Feed Maltego Contact                        

Domain > salaeigroup.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports
http://ransomwaretracker.abuse.ch/feeds/csv/    
https://otx.alienvault.com/pulse/56e85de34637f24cb...    
https://ransomwaretracker.abuse.ch/downloads/RW_UR...    

Files that talk to salaeigroup.com
MD5A/V
97abbe42307b444c73464f3ac41bcc6c
bb312126da8010e571d6691c8ff3ce2b
097eedf94ad113cbdad67755a8da6dd0
053b11a9ea825f7b433a125a3fd82997[Ransom_CRYPTESLA.SMJ5] [Ransom-Teerac!053B11A9EA82]
9315d4a2107a47d0e2f9960256290fd0[Ransom.FileLocker] [Trojan.Crypmod!] [Trojan-Ransom.Win32.Crypmod.xdb] [Trojan.Win32.AVKill.eamitc] [Trojan.AVKill.60024] [BehavesLike.Win32.PackedAP.fh] [Trojan.Bitman.ik] [TR/Crypt.Xpack.410098] [VirTool:Win32/CeeInject.GF] [Trojan/Win32.Teslacrypt] [Trojan.Win32.Crypt] [W32/Kryptik.EOZZ!tr] [Crypt5.AKTB]
e455d3d333ab6b8570dce2d1b2d570da[Trojan.MalPack.PK] [Trojan-Ransom.Win32.Bitman.jyp] [Trojan.Encoder.3981] [BehavesLike.Win32.PWSZbot.fh] [TrojanProxy.Lethic.hm] [TR/Crypt.Xpack.409769] [Trojan[Ransom]/Win32.Crypmod] [Ransom:Win32/Tescrypt.A] [Trojan/Win32.Teslacrypt] [Trj/TeslaCrypt.A] [Win32/Filecoder.TeslaCrypt.I] [Trojan.Win32.Filecoder] [W32/Kryptik.EOZZ!tr] [FileCryptor.HLD]
042783aabfb1b066df2c5bcb6281bf88[Trojan.TeslaCrypt.AM] [Trojan.TeslaCrypt.AM] [Trojan.MalPack.PK] [Trojan.TeslaCrypt.AM] [Trojan.Win32.AVKill.eamjvx] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAIB] [Backdoor.Win32.Androm.dfq] [Trojan.Bitman!] [Win32.Trojan.Kryptik.Chj] [Trojan.TeslaCrypt.AM] [Trojan.TeslaCrypt.AM] [Trojan.AVKill.59999] [Ransom_CRYPTESLA.YUYAIB] [BehavesLike.Win32.PWSZbot.fh] [TrojanProxy.Lethic.hm] [TR/Crypt.Xpack.409794] [Trojan[Ransom]/Win32.Crypmod] [Ransom:Win32/Tescrypt!rfn] [Trojan.TeslaCrypt.AM] [Trojan/Win32.Teslacrypt] [Trojan.TeslaCrypt.AM] [Trojan.TeslaCrypt.AM] [Trojan.Win32.Crypt] [W32/Kryptik.EOZZ!tr] [Crypt5.AKPM]
404b3f0c2c0b78346f6447509e84fb48[Ransom-Teerac!404B3F0C2C0B] [Ransom.TeslaCrypt] [Trojan.Win32.Encoder.eamlsx] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.CBQ2N] [Trojan-Ransom.Win32.Bitman.jyc] [Troj.Ransom.W32.Bitman!c] [Mal/Ransom-EC] [Trojan.Encoder.3981] [Ransom_CRYPTESLA.CBQ2N] [BehavesLike.Win32.PWSZbot.fm] [Trojan.Bitman.hv] [TR/Crypt.ZPACK.229123] [W32/Kryptik.EOVH!tr] [Trojan[Ransom]/Win32.Bitman] [Trojan.Zusy.D2CA4F] [Trojan/Win32.Teslacrypt] [Ransom:Win32/Tescrypt.H] [Trj/CI.A] [Win32.Trojan.Bp-ransomware.Ejqz] [Trojan.Win32.Injector] [FileCryptor.HLG]
2014032a7d282e84e6453fa723648015[W32.DestoperLTQ.Trojan] [Ransomware-FEB!2014032A7D28] [Ransom.TeslaCrypt] [Trojan.Bitman!] [Ransom_CRYPTESLA.SMJ6] [Trojan-Ransom.Win32.Bitman.jzg] [Trojan.Win32.AVKill.eamprf] [Mal/Ransom-EC] [Trojan.AVKill.59990] [Ransomware-FEB!2014032A7D28] [Trojan.Bitman.io] [TR/Crypt.ZPACK.229169] [W32/Kryptik.EOVH!tr] [Trojan.Symmi.DEF81] [Trojan/Win32.Teslacrypt] [Ransom:Win32/Tescrypt.A] [Trojan.Win32.Injector] [Inject3.ACBT]
9566058d04a78774ccaa33a363d23f45[Ransom.TeslaCrypt] [Trojan.Cryptolocker.N] [Trojan-Ransom.Win32.Bitman.kam] [Mal/Wonton-CD] [Trojan.Encoder.4005] [BehavesLike.Win32.Backdoor.dh] [Trojan.Bitman.ii] [TR/Crypt.Xpack.409874] [Trojan[Ransom]/Win32.Bitman] [Ransom:Win32/Tescrypt.H] [Trojan.Zusy.D2CAB8] [Trojan/Win32.Teslacrypt] [Win32/Filecoder.TeslaCrypt.I] [Win32.Trojan.Bp-ransomware.Ejqz] [Trojan.Win32.Filecoder] [W32/Kryptik.EOZI!tr] [FileCryptor.HNB] [Trj/TeslaCrypt.A]
899d2d2ee702f75ea3da9a819645108b[Ransom.TeslaCrypt] [Trojan.Bitman!] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.CBQ2N] [Trojan-Ransom.Win32.Bitman.jyv] [Trojan.Win32.AVKill.eamllz] [Troj/TeslaC-AE] [Trojan.AVKill.60015] [Ransom_CRYPTESLA.CBQ2N] [BehavesLike.Win32.Almanahe.fm] [Trojan.Bitman.id] [TR/Crypt.ZPACK.229276] [W32/Kryptik.EOVH!tr] [Trojan/Win32.Teslacrypt] [Ransom:Win32/Tescrypt.H] [Ransomware-FEB!899D2D2EE702] [Win32.Trojan.Bitman.Eckr] [Trojan.Win32.Injector] [Inject3.ACBO]
2004173cca38ad3d22d1f89fd791302d[Ransom.TeslaCrypt] [Trojan/Kryptik.eoyj] [Trojan.Crypmod!] [Trojan.Cryptolocker.N] [Trojan-Ransom.Win32.Crypmod.wyu] [Trojan.Win32.Encoder.eamjtn] [Trojan.Encoder.4005] [Trojan.Crypmod.Win32.246] [BehavesLike.Win32.Backdoor.fc] [W32/Trojan.PSTB-0395] [TR/AD.TeslaCrypt.Y.234] [Trojan[Ransom]/Win32.Crypmod] [Ransom:Win32/Tescrypt.A] [Uds.Dangerousobject.Multi!c] [Trojan/Win32.Teslacrypt] [Downloader-FAMV!2004173CCA38] [Win32.Trojan.Crypmod.Hlxk] [Trojan.Win32.Crypt] [W32/Kryptik.EOVZ!tr] [Crypt5.AKRF]
2056d873ae546f57d4148411cbd855b1[W32.Clod491.Trojan.231f] [Trojan.TeslaCrypt.AO] [Trojan/W32.Ransom.335872.B] [Ransom.Tescrypt.MUE.A6] [Trojan.TeslaCrypt.AO] [Ransom.TeslaCrypt] [Trojan.Kryptik.Win32.865287] [Trojan/Kryptik.eozp] [Trojan.TeslaCrypt.AO] [Win32.Trojan.WisdomEyes.151026.9950.9999] [Trojan.Cryptolocker.N] [RANSOM_CRYPTESLA_FB260025.UVPM] [Trojan.Win32.Encoder.eanlqf] [Trojan.Win32.Z.Teslacrypt.335872.C[h]] [Win32.Trojan.Crypmod.Hnus] [Trojan.TeslaCrypt.AO] [Mal/Ransom-EJ] [Trojan.TeslaCrypt.AO] [Trojan.Encoder.4005] [BehavesLike.Win32.Skintrim.fc] [W32/Trojan.LRPF-0104] [TR/TeslaCrypt.A.8] [Ransom:Win32/Tescrypt.A] [Trojan.TeslaCrypt.AO] [Ransom.Filecoder/Variant] [Trojan/Win32.Teslacrypt] [Trojan.TeslaCrypt.AO] [Downloader-FAMV!2056D873AE54] [Hoax.Crypmod] [Trojan.Ransom-Tesla3!1.A451] [Trojan.Crypmod!] [Trojan.Win32.Crypt] [W32/Kryptik.EPAA!tr] [Crypt5.AKTJ] [Win32/Troj]

Whois
PropertyValue
NameServer NS34.DOMAINCONTROL.COM
Created 2010-06-08 00:00:00
Changed 2015-04-28 00:00:00
Expires 2019-06-08 00:00:00
Registrar GODADDY.COM, LLC

DNS Resolutions
DateIP Address
2016-02-22107.180.2.115 (ClassC)
2016-05-19184.168.221.60 (ClassC)
2016-10-15192.185.25.227 (ClassC)
2019-05-0466.96.144.190 (ClassC)
2023-06-15208.91.197.13 (ClassC)
2024-05-2650.87.147.73 (ClassC)
2024-07-11208.91.197.132 (ClassC)
2025-08-18162.0.232.231 (ClassC)

Port 80

Port 443
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information