Analysis Date2015-09-17 16:17:37
MD5d6feb0b524f025562233a4b0dce73884
SHA1f55f46127cf7aa828c93b6d7b7261b4df2a55374

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 system file
Section.text md5: f3f8bbf9928f88249bbe6aed4d010643 sha1: b4739e20d89398371e840845b85d81c3d9d13daf size: 53248
Section.rdata md5: 5ea67ea05c741dfb5efb37a02d3e33c6 sha1: bbdb95f75fda76942f246ab154ecdb20c0fa07c1 size: 43520
Section.data md5: e64082c0f57a490d278303706b68f96e sha1: 9d4dc2429825b55d0c94644359a9ae52eac594fc size: 6656
Sectiontext md5: ea6179421345907c4ca40a9eaf8f9f15 sha1: 30fe9f30c84fb9be021a6e8202a45e9ed356f480 size: 8192
Section.rsrc md5: e8f364f8dd45e48ce3837d0c52b47f7c sha1: 685acade1ff5147326a66d3de277c134457c6aa4 size: 96256
Timestamp2015-09-02 20:07:08
Pdb pathP:\stories\transactional\elementsd.pdb
VersionLegalCopyright: Copyright © ThunderSoft 2014
InternalName: Folder Files Hasher
FileVersion: 1.6.4.6
CompanyName: ThunderSoft
LegalTrademarks: ThunderSoft
ProductName: Folder Files Informer
ProductVersion: 1.6.4.6
FileDescription: Folder Files Informer
OriginalFilename: Folder Files Informer
PackerMicrosoft Visual C++ ?.?
PEhashbac88869a589d5e5e38847848984f76e1acee0f4
IMPhash56433ee3a68a26bfdef4693643a6ad4d
AVCA (E-Trust Ino)no_virus
AVRisingno_virus
AVMcafeeRDN/PWS-Banker
AVAvira (antivir)TR/AD.Tinba.Y.96
AVTwisterno_virus
AVAd-AwareGen:Variant.Strictor.94966
AVAlwil (avast)Malware-gen:Win32:Malware-gen
AVEset (nod32)no_virus
AVGrisoft (avg)Crypt4.CEOX
AVSymantecno_virus
AVFortinetW32/Tinba.DVRU!tr
AVBitDefenderGen:Variant.Strictor.94966
AVK7Trojan ( 004ce91c1 )
AVMicrosoft Security EssentialsTrojan:Win32/Tinba.F
AVMicroWorld (escan)Gen:Variant.Strictor.94966
AVMalwareBytesno_virus
AVAuthentiumW32/Trojan.NJTK-1494
AVFrisk (f-prot)no_virus
AVIkarusTrojan.Win32.Crypt
AVEmsisoftGen:Variant.Strictor.94966
AVZillya!Trojan.Tinba.Win32.2983
AVKasperskyTrojan-Banker.Win32.Tinba.yin
AVTrend Microno_virus
AVCAT (quickheal)no_virus
AVVirusBlokAda (vba32)BScope.Malware-Cryptor.Drixed
AVPadvishno_virus
AVBullGuardGen:Variant.Strictor.94966
AVArcabit (arcavir)Gen:Variant.Strictor.94966
AVClamAVno_virus
AVDr. WebTrojan.PWS.Tinba.153
AVF-SecureGen:Variant.Strictor.94966

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates ProcessEXPLORER

Process
↳ EXPLORER

RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\C805B012 ➝
C:\Documents and Settings\Administrator\Application Data\C805B012\bin.exe
Creates FileC:\Documents and Settings\Administrator\Application Data\C805B012\bin.exe
Creates File\Device\Afd\Endpoint
Creates MutexC805B012N
Creates MutexC805B012

Process
↳ C:\WINDOWS\Explorer.EXE

Process
↳ C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

Network Details:

DNSfrvnobpkkogv.com
Type: A
5.2.189.251
DNSfrvnobpkkogv.info
Type: A
185.20.227.115
DNSpdjmvyykibjm.com
Type: A
82.165.37.127
DNSpdjmvyykibjm.info
Type: A
173.44.130.42
DNSpdjmvyykibjm.info
Type: A
103.1.149.51
DNSqptdnsbexqgh.com
Type: A
95.211.230.75
DNSo6gd64rfbcu0i.com
Type: A
DNSfrvnobpkkogv.net
Type: A
DNSfrvnobpkkogv.su
Type: A
DNSpdjmvyykibjm.net
Type: A
DNSpdjmvyykibjm.su
Type: A
DNSqptdnsbexqgh.net
Type: A
DNSqptdnsbexqgh.info
Type: A
DNSqptdnsbexqgh.su
Type: A
DNSrbfubkvpyxxu.com
Type: A
DNSrbfubkvpyxxu.net
Type: A
DNSrbfubkvpyxxu.info
Type: A
DNSrbfubkvpyxxu.su
Type: A
DNSqqxwrbyisjpb.com
Type: A
DNSqqxwrbyisjpb.net
Type: A
DNSqqxwrbyisjpb.info
Type: A
DNSqqxwrbyisjpb.su
Type: A
DNSryyuvkyyjodj.com
Type: A
DNSryyuvkyyjodj.net
Type: A
DNSryyuvkyyjodj.info
Type: A
DNSryyuvkyyjodj.su
Type: A
DNSejgiimlpqsxy.com
Type: A
DNSejgiimlpqsxy.net
Type: A
DNSejgiimlpqsxy.info
Type: A
DNSejgiimlpqsxy.su
Type: A
DNSnvbnvvofvgxn.com
Type: A
DNSnvbnvvofvgxn.net
Type: A
DNSnvbnvvofvgxn.info
Type: A
DNSnvbnvvofvgxn.su
Type: A
DNSpmqeelsxyddk.com
Type: A
DNSpmqeelsxyddk.net
Type: A
DNSpmqeelsxyddk.info
Type: A
DNSpmqeelsxyddk.su
Type: A
DNStumrmlmlgkfb.com
Type: A
DNStumrmlmlgkfb.net
Type: A
DNStumrmlmlgkfb.info
Type: A
DNStumrmlmlgkfb.su
Type: A
DNSnqnohypmruto.com
Type: A
DNSnqnohypmruto.net
Type: A
DNSnqnohypmruto.info
Type: A
DNSnqnohypmruto.su
Type: A
DNSpsrvcdmytqxj.com
Type: A
DNSpsrvcdmytqxj.net
Type: A
DNSpsrvcdmytqxj.info
Type: A
DNSpsrvcdmytqxj.su
Type: A
DNShybttulkfggd.com
Type: A
DNShybttulkfggd.net
Type: A
DNShybttulkfggd.info
Type: A
DNShybttulkfggd.su
Type: A
DNStbiqvbnfoglw.com
Type: A
DNStbiqvbnfoglw.net
Type: A
DNStbiqvbnfoglw.info
Type: A
DNStbiqvbnfoglw.su
Type: A
DNSkjghlmnowvii.com
Type: A
DNSkjghlmnowvii.net
Type: A
DNSkjghlmnowvii.info
Type: A
DNSkjghlmnowvii.su
Type: A
DNSqvthhthldtwt.com
Type: A
DNSqvthhthldtwt.net
Type: A
DNSqvthhthldtwt.info
Type: A
DNSqvthhthldtwt.su
Type: A
DNSiytxyhppnohq.com
Type: A
DNSiytxyhppnohq.net
Type: A
DNSiytxyhppnohq.info
Type: A
DNSiytxyhppnohq.su
Type: A
DNSnmrsturorqpp.com
Type: A
DNSnmrsturorqpp.net
Type: A
DNSnmrsturorqpp.info
Type: A
DNSnmrsturorqpp.su
Type: A
DNShugwggovbefv.com
Type: A
DNShugwggovbefv.net
Type: A
DNShugwggovbefv.info
Type: A
DNShugwggovbefv.su
Type: A
DNStkjvclccemts.com
Type: A
DNStkjvclccemts.net
Type: A
DNStkjvclccemts.info
Type: A
DNStkjvclccemts.su
Type: A
DNStnnvvummqcps.com
Type: A
DNStnnvvummqcps.net
Type: A
DNStnnvvummqcps.info
Type: A
DNStnnvvummqcps.su
Type: A
DNSwwvwutyxjsgb.com
Type: A
DNSwwvwutyxjsgb.net
Type: A
DNSwwvwutyxjsgb.info
Type: A
DNSwwvwutyxjsgb.su
Type: A
DNSqbewytksrbjr.com
Type: A
DNSqbewytksrbjr.net
Type: A
DNSqbewytksrbjr.info
Type: A
DNSqbewytksrbjr.su
Type: A
DNSpnyquffqjtql.com
Type: A
DNSpnyquffqjtql.net
Type: A
DNSpnyquffqjtql.info
Type: A
DNSpnyquffqjtql.su
Type: A
DNStmtwhylqyino.com
Type: A
DNStmtwhylqyino.net
Type: A
DNStmtwhylqyino.info
Type: A
DNStmtwhylqyino.su
Type: A
DNSvuhgbnwpxxpl.com
Type: A
DNSvuhgbnwpxxpl.net
Type: A
DNSvuhgbnwpxxpl.info
Type: A
DNSvuhgbnwpxxpl.su
Type: A
DNSpyxgfgdgfbcb.com
Type: A
DNSpyxgfgdgfbcb.net
Type: A
DNSpyxgfgdgfbcb.info
Type: A
DNSpyxgfgdgfbcb.su
Type: A
DNScjvwgrgpnwjx.com
Type: A
DNScjvwgrgpnwjx.net
Type: A
DNScjvwgrgpnwjx.info
Type: A
DNScjvwgrgpnwjx.su
Type: A
DNSyyqnbclmplsn.com
Type: A
DNSyyqnbclmplsn.net
Type: A
DNSyyqnbclmplsn.info
Type: A
DNSyyqnbclmplsn.su
Type: A
DNSbsjjfsjecbdv.com
Type: A
DNSbsjjfsjecbdv.net
Type: A
DNSbsjjfsjecbdv.info
Type: A
DNSbsjjfsjecbdv.su
Type: A
DNSlcbqcqppdcvv.com
Type: A
DNSlcbqcqppdcvv.net
Type: A
DNSlcbqcqppdcvv.info
Type: A
DNSlcbqcqppdcvv.su
Type: A
DNSqjpklpcjssst.com
Type: A
DNSqjpklpcjssst.net
Type: A
DNSqjpklpcjssst.info
Type: A
DNSqjpklpcjssst.su
Type: A
DNSxusdqxcssrtw.com
Type: A
DNSxusdqxcssrtw.net
Type: A
DNSxusdqxcssrtw.info
Type: A
DNSxusdqxcssrtw.su
Type: A
DNSrwkwxdtsfnkx.com
Type: A
DNSrwkwxdtsfnkx.net
Type: A
DNSrwkwxdtsfnkx.info
Type: A
DNSrwkwxdtsfnkx.su
Type: A
DNSwxekyoxhdenb.com
Type: A
DNSwxekyoxhdenb.net
Type: A
DNSwxekyoxhdenb.info
Type: A
DNSwxekyoxhdenb.su
Type: A
DNSqvngxowfmvvu.com
Type: A
DNSqvngxowfmvvu.net
Type: A
DNSqvngxowfmvvu.info
Type: A
DNSqvngxowfmvvu.su
Type: A
DNSiyydoummspee.com
Type: A
DNSiyydoummspee.net
Type: A
DNSiyydoummspee.info
Type: A
DNSiyydoummspee.su
Type: A
DNSndcjsryyuoff.com
Type: A
DNSndcjsryyuoff.net
Type: A
DNSndcjsryyuoff.info
Type: A
DNSndcjsryyuoff.su
Type: A
DNSqyiiwslefvco.com
Type: A
DNSqyiiwslefvco.net
Type: A
DNSqyiiwslefvco.info
Type: A
DNSqyiiwslefvco.su
Type: A
DNSotuvolmnmhef.com
Type: A
DNSotuvolmnmhef.net
Type: A
DNSotuvolmnmhef.info
Type: A
DNSotuvolmnmhef.su
Type: A
DNSvpxympsxhybe.com
Type: A
DNSvpxympsxhybe.net
Type: A
DNSvpxympsxhybe.info
Type: A
DNSvpxympsxhybe.su
Type: A
DNSxqdibgwwjrrq.com
Type: A
DNSxqdibgwwjrrq.net
Type: A
DNSxqdibgwwjrrq.info
Type: A
DNSxqdibgwwjrrq.su
Type: A
DNSvokxxxhxpyhy.com
Type: A
DNSvokxxxhxpyhy.net
Type: A
DNSvokxxxhxpyhy.info
Type: A
DNSvokxxxhxpyhy.su
Type: A
DNSxnyynnmuiiqj.com
Type: A
DNSxnyynnmuiiqj.net
Type: A
DNSxnyynnmuiiqj.info
Type: A
DNSxnyynnmuiiqj.su
Type: A
DNSsghsxpsvulcb.com
Type: A
DNSsghsxpsvulcb.net
Type: A
DNSsghsxpsvulcb.info
Type: A
DNSsghsxpsvulcb.su
Type: A
DNSoldkowccpbqh.com
Type: A
DNSoldkowccpbqh.net
Type: A
DNSoldkowccpbqh.info
Type: A
DNSoldkowccpbqh.su
Type: A
DNSxllqwgtppipp.com
Type: A
DNSxllqwgtppipp.net
Type: A
DNSxllqwgtppipp.info
Type: A
DNSxllqwgtppipp.su
Type: A
DNSqpjfmmlthggh.com
Type: A
DNSqpjfmmlthggh.net
Type: A
DNSqpjfmmlthggh.info
Type: A
DNSqpjfmmlthggh.su
Type: A
DNSrytdnnpfgccm.com
Type: A
DNSrytdnnpfgccm.net
Type: A
DNSrytdnnpfgccm.info
Type: A
DNSrytdnnpfgccm.su
Type: A
DNSefrsqnowxets.com
Type: A
DNSefrsqnowxets.net
Type: A
DNSefrsqnowxets.info
Type: A
DNSefrsqnowxets.su
Type: A
DNSumxggmrehpdd.com
Type: A
DNSumxggmrehpdd.net
Type: A
DNSumxggmrehpdd.info
Type: A
DNSumxggmrehpdd.su
Type: A
DNSwxyuggjrvvbr.com
Type: A
DNSwxyuggjrvvbr.net
Type: A
DNSwxyuggjrvvbr.info
Type: A
DNSwxyuggjrvvbr.su
Type: A
DNSqcxjrvmbixww.com
Type: A
DNSqcxjrvmbixww.net
Type: A
DNSqcxjrvmbixww.info
Type: A
DNSqcxjrvmbixww.su
Type: A
DNSqvmjknmdkwnj.com
Type: A
DNSqvmjknmdkwnj.net
Type: A
DNSqvmjknmdkwnj.info
Type: A
DNSqvmjknmdkwnj.su
Type: A
DNSihwnmtwvwxwv.com
Type: A
DNSihwnmtwvwxwv.net
Type: A
DNSihwnmtwvwxwv.info
Type: A
DNSihwnmtwvwxwv.su
Type: A
DNSqixmppwqyxsb.com
Type: A
DNSqixmppwqyxsb.net
Type: A
DNSqixmppwqyxsb.info
Type: A
DNSqixmppwqyxsb.su
Type: A
DNSwxviyhyijcsh.com
Type: A
DNSwxviyhyijcsh.net
Type: A
DNSwxviyhyijcsh.info
Type: A
DNSwxviyhyijcsh.su
Type: A
DNSqrvqmxtmulcm.com
Type: A
DNSqrvqmxtmulcm.net
Type: A
DNSqrvqmxtmulcm.info
Type: A
DNSqrvqmxtmulcm.su
Type: A
DNSrktujkbrughn.com
Type: A
DNSrktujkbrughn.net
Type: A
DNSrktujkbrughn.info
Type: A
DNSrktujkbrughn.su
Type: A
DNSlkjitkbgkdwm.com
Type: A
DNSlkjitkbgkdwm.net
Type: A
DNSlkjitkbgkdwm.info
Type: A
DNSlkjitkbgkdwm.su
Type: A
DNSyvckmvgkdnhs.com
Type: A
DNSyvckmvgkdnhs.net
Type: A
DNSyvckmvgkdnhs.info
Type: A
DNSyvckmvgkdnhs.su
Type: A
DNSgfellcoxdeyt.com
Type: A
DNSgfellcoxdeyt.net
Type: A
DNSgfellcoxdeyt.info
Type: A
DNSgfellcoxdeyt.su
Type: A
DNSiiqbhhqcrbup.com
Type: A
DNSiiqbhhqcrbup.net
Type: A
DNSiiqbhhqcrbup.info
Type: A
DNSiiqbhhqcrbup.su
Type: A
DNSwxyvvoocrvie.com
Type: A
DNSwxyvvoocrvie.net
Type: A
DNSwxyvvoocrvie.info
Type: A
DNSwxyvvoocrvie.su
Type: A
DNSqcccwoxgmiih.com
Type: A
DNSqcccwoxgmiih.net
Type: A
DNSqcccwoxgmiih.info
Type: A
DNSqcccwoxgmiih.su
Type: A
DNSqvwgfwvfkpsd.com
Type: A
DNSqvwgfwvfkpsd.net
Type: A
DNSqvwgfwvfkpsd.info
Type: A
DNSqvwgfwvfkpsd.su
Type: A
DNSidpxqrsvupww.com
Type: A
DNSidpxqrsvupww.net
Type: A
DNSidpxqrsvupww.info
Type: A
DNSidpxqrsvupww.su
Type: A
DNSelwwwjmlttqu.com
Type: A
DNSelwwwjmlttqu.net
Type: A
DNSelwwwjmlttqu.info
Type: A
DNSelwwwjmlttqu.su
Type: A
DNSqtwwnxenkdgs.com
Type: A
DNSqtwwnxenkdgs.net
Type: A
DNSqtwwnxenkdgs.info
Type: A
DNSqtwwnxenkdgs.su
Type: A
DNSjnfnuqxxlfvf.com
Type: A
DNSjnfnuqxxlfvf.net
Type: A
DNSjnfnuqxxlfvf.info
Type: A
DNSjnfnuqxxlfvf.su
Type: A
DNSvwxxpjjqlofr.com
Type: A
DNSvwxxpjjqlofr.net
Type: A
DNSvwxxpjjqlofr.info
Type: A
DNSvwxxpjjqlofr.su
Type: A
DNScocweuiiplnv.com
Type: A
DNScocweuiiplnv.net
Type: A
DNScocweuiiplnv.info
Type: A
DNScocweuiiplnv.su
Type: A
DNSfnvfnbocbhwf.com
Type: A
DNSfnvfnbocbhwf.net
Type: A
DNSfnvfnbocbhwf.info
Type: A
DNSfnvfnbocbhwf.su
Type: A
DNSfxrlmptmscqu.com
Type: A
DNSfxrlmptmscqu.net
Type: A
DNSfxrlmptmscqu.info
Type: A
DNSfxrlmptmscqu.su
Type: A
DNSloumscqqdsnk.com
Type: A
DNSloumscqqdsnk.net
Type: A
DNSloumscqqdsnk.info
Type: A
DNSloumscqqdsnk.su
Type: A
DNSxcffvukxyytl.com
Type: A
DNSxcffvukxyytl.net
Type: A
DNSxcffvukxyytl.info
Type: A
DNSxcffvukxyytl.su
Type: A
DNShnscjfmyxbbi.com
Type: A
DNShnscjfmyxbbi.net
Type: A
DNShnscjfmyxbbi.info
Type: A
DNShnscjfmyxbbi.su
Type: A
DNSxxeuuyxqhoeg.com
Type: A
DNSxxeuuyxqhoeg.net
Type: A
DNSxxeuuyxqhoeg.info
Type: A
DNSxxeuuyxqhoeg.su
Type: A
DNSqvlkpvjjsogw.com
Type: A
DNSqvlkpvjjsogw.net
Type: A
DNSqvlkpvjjsogw.info
Type: A
DNSqvlkpvjjsogw.su
Type: A
DNSifsdefgjidsj.com
Type: A
DNSifsdefgjidsj.net
Type: A
DNSifsdefgjidsj.info
Type: A
DNSifsdefgjidsj.su
Type: A
DNSnqtbtkhtsspq.com
Type: A
DNSnqtbtkhtsspq.net
Type: A
DNSnqtbtkhtsspq.info
Type: A
DNSnqtbtkhtsspq.su
Type: A
DNSphcrshsrkhij.com
Type: A
DNSphcrshsrkhij.net
Type: A
DNSphcrshsrkhij.info
Type: A
DNSphcrshsrkhij.su
Type: A
DNSutdefgsbxqjt.com
Type: A
DNSutdefgsbxqjt.net
Type: A
DNSutdefgsbxqjt.info
Type: A
DNSutdefgsbxqjt.su
Type: A
DNSvwoyqxpvwssc.com
Type: A
DNSvwoyqxpvwssc.net
Type: A
DNSvwoyqxpvwssc.info
Type: A
DNSvwoyqxpvwssc.su
Type: A
DNScdygwvgupkpb.com
Type: A
DNScdygwvgupkpb.net
Type: A
DNScdygwvgupkpb.info
Type: A
DNScdygwvgupkpb.su
Type: A
DNSvsijxufigrrq.com
Type: A
DNSvsijxufigrrq.net
Type: A
DNSvsijxufigrrq.info
Type: A
DNSvsijxufigrrq.su
Type: A
DNSvfnvmmuddldd.com
Type: A
DNSvfnvmmuddldd.net
Type: A
DNSvfnvmmuddldd.info
Type: A
DNSvfnvmmuddldd.su
Type: A
DNSqfxpbgoiimwm.com
Type: A
DNSqfxpbgoiimwm.net
Type: A
DNSqfxpbgoiimwm.info
Type: A
DNSqfxpbgoiimwm.su
Type: A
DNStqtknmdgrxxn.com
Type: A
DNStqtknmdgrxxn.net
Type: A
DNStqtknmdgrxxn.info
Type: A
DNStqtknmdgrxxn.su
Type: A
DNStwporvevihph.com
Type: A
DNStwporvevihph.net
Type: A
DNStwporvevihph.info
Type: A
DNStwporvevihph.su
Type: A
DNSevnqlkpejkgi.com
Type: A
DNSevnqlkpejkgi.net
Type: A
DNSevnqlkpejkgi.info
Type: A
DNSevnqlkpejkgi.su
Type: A
DNSnwysbmwttllo.com
Type: A
DNSnwysbmwttllo.net
Type: A
DNSnwysbmwttllo.info
Type: A
DNSnwysbmwttllo.su
Type: A
DNSlhtwvwdkkpmo.com
Type: A
DNSlhtwvwdkkpmo.net
Type: A
DNSlhtwvwdkkpmo.info
Type: A
DNSlhtwvwdkkpmo.su
Type: A
DNSmmevspyibvnu.com
Type: A
DNSmmevspyibvnu.net
Type: A
DNSmmevspyibvnu.info
Type: A
DNSmmevspyibvnu.su
Type: A
DNSbflmhufbjqyq.com
Type: A
DNSbflmhufbjqyq.net
Type: A
DNSbflmhufbjqyq.info
Type: A
DNSbflmhufbjqyq.su
Type: A
DNSqvwpyrstuewy.com
Type: A
DNSqvwpyrstuewy.net
Type: A
DNSqvwpyrstuewy.info
Type: A
DNSqvwpyrstuewy.su
Type: A
DNSidcbxeuhpcwx.com
Type: A
DNSidcbxeuhpcwx.net
Type: A
DNSidcbxeuhpcwx.info
Type: A
DNSidcbxeuhpcwx.su
Type: A
DNSeffnkllsbjhx.com
Type: A
DNSeffnkllsbjhx.net
Type: A
DNSeffnkllsbjhx.info
Type: A
DNSeffnkllsbjhx.su
Type: A
DNSurevimlhxggd.com
Type: A
DNSurevimlhxggd.net
Type: A
DNSurevimlhxggd.info
Type: A
DNSurevimlhxggd.su
Type: A
DNSomrsttuehkdj.com
Type: A
DNSomrsttuehkdj.net
Type: A
DNSomrsttuehkdj.info
Type: A
DNSomrsttuehkdj.su
Type: A
DNSyvxwyxhxwtwv.com
Type: A
DNSyvxwyxhxwtwv.net
Type: A
DNSyvxwyxhxwtwv.info
Type: A
DNSyvxwyxhxwtwv.su
Type: A
DNSgjdnfgnklqru.com
Type: A
DNSgjdnfgnklqru.net
Type: A
DNSgjdnfgnklqru.info
Type: A
DNSgjdnfgnklqru.su
Type: A
DNSnxiubvrbdgfy.com
Type: A
DNSnxiubvrbdgfy.net
Type: A
DNSnxiubvrbdgfy.info
Type: A
DNSnxiubvrbdgfy.su
Type: A
DNSlrolmsrutgfe.com
Type: A
DNSlrolmsrutgfe.net
Type: A
DNSlrolmsrutgfe.info
Type: A
DNSlrolmsrutgfe.su
Type: A
DNSpuncdcruxsvy.com
Type: A
DNSpuncdcruxsvy.net
Type: A
DNSpuncdcruxsvy.info
Type: A
DNSpuncdcruxsvy.su
Type: A
DNSjnxpgturkyxg.com
Type: A
DNSjnxpgturkyxg.net
Type: A
DNSjnxpgturkyxg.info
Type: A
DNSjnxpgturkyxg.su
Type: A
DNSvqpdiryhiedw.com
Type: A
DNSvqpdiryhiedw.net
Type: A
DNSvqpdiryhiedw.info
Type: A
DNSvqpdiryhiedw.su
Type: A
DNShkpiyxnspsjq.com
Type: A
DNShkpiyxnspsjq.net
Type: A
DNShkpiyxnspsjq.info
Type: A
DNShkpiyxnspsjq.su
Type: A
DNSeybbbkrrktss.com
Type: A
DNSeybbbkrrktss.net
Type: A
DNSeybbbkrrktss.info
Type: A
DNSeybbbkrrktss.su
Type: A
DNSnlkjkdkjedbf.com
Type: A
DNSnlkjkdkjedbf.net
Type: A
DNSnlkjkdkjedbf.info
Type: A
DNSnlkjkdkjedbf.su
Type: A
DNSxhwwgwwctgvf.com
Type: A
DNSxhwwgwwctgvf.net
Type: A
DNSxhwwgwwctgvf.info
Type: A
DNSxhwwgwwctgvf.su
Type: A
DNSmlfvxxgnjjji.com
Type: A
DNSmlfvxxgnjjji.net
Type: A
DNSmlfvxxgnjjji.info
Type: A
DNSmlfvxxgnjjji.su
Type: A
DNSytduyybspyxr.com
Type: A
DNSytduyybspyxr.net
Type: A
DNSytduyybspyxr.info
Type: A
DNSytduyybspyxr.su
Type: A
DNSrqhynvdnpxpp.com
Type: A
DNSrqhynvdnpxpp.net
Type: A
DNSrqhynvdnpxpp.info
Type: A
DNSrqhynvdnpxpp.su
Type: A
DNSdwveffsfxldd.com
Type: A
DNSdwveffsfxldd.net
Type: A
DNSdwveffsfxldd.info
Type: A
DNSdwveffsfxldd.su
Type: A
DNSpowtdyglxfei.com
Type: A
DNSpowtdyglxfei.net
Type: A
DNSpowtdyglxfei.info
Type: A
DNSpowtdyglxfei.su
Type: A
DNSpmiijrrxoxdw.com
Type: A
DNSpmiijrrxoxdw.net
Type: A
DNSpmiijrrxoxdw.info
Type: A
DNSpmiijrrxoxdw.su
Type: A
DNStukxyqpeeumq.com
Type: A
DNStukxyqpeeumq.net
Type: A
DNStukxyqpeeumq.info
Type: A
DNStukxyqpeeumq.su
Type: A
DNSnmvwtsuvkuec.com
Type: A
DNSnmvwtsuvkuec.net
Type: A
DNSnmvwtsuvkuec.info
Type: A
DNSnmvwtsuvkuec.su
Type: A
DNShnoxetssttsx.com
Type: A
DNShnoxetssttsx.net
Type: A
DNShnoxetssttsx.info
Type: A
DNShnoxetssttsx.su
Type: A
DNSxhfdpbgvgwxn.com
Type: A
DNSxhfdpbgvgwxn.net
Type: A
DNSxhfdpbgvgwxn.info
Type: A
DNSxhfdpbgvgwxn.su
Type: A
DNSmlltcgddqytl.com
Type: A
DNSmlltcgddqytl.net
Type: A
DNSmlltcgddqytl.info
Type: A
DNSmlltcgddqytl.su
Type: A
DNSyhhrvqdmwoht.com
Type: A
DNSyhhrvqdmwoht.net
Type: A
DNSyhhrvqdmwoht.info
Type: A
DNSyhhrvqdmwoht.su
Type: A
DNSnnueqkoeucfk.com
Type: A
DNSnnueqkoeucfk.net
Type: A
DNSnnueqkoeucfk.info
Type: A
DNSnnueqkoeucfk.su
Type: A
DNSxdmbkdefefnf.com
Type: A
DNSxdmbkdefefnf.net
Type: A
DNSxdmbkdefefnf.info
Type: A
DNSxdmbkdefefnf.su
Type: A
DNSimfolnvjejru.com
Type: A
DNSimfolnvjejru.net
Type: A
DNSimfolnvjejru.info
Type: A
DNSimfolnvjejru.su
Type: A
DNSfqqyyybyvbif.com
Type: A
DNSfqqyyybyvbif.net
Type: A
DNSfqqyyybyvbif.info
Type: A
DNSfqqyyybyvbif.su
Type: A
DNSpqlorihxxjqq.com
Type: A
DNSpqlorihxxjqq.net
Type: A
DNSpqlorihxxjqq.info
Type: A
DNSpqlorihxxjqq.su
Type: A
DNSttuvpgfedowg.com
Type: A
DNSttuvpgfedowg.net
Type: A
DNSttuvpgfedowg.info
Type: A
DNSttuvpgfedowg.su
Type: A
DNSubytplptivvu.com
Type: A
DNSubytplptivvu.net
Type: A
DNSubytplptivvu.info
Type: A
DNSubytplptivvu.su
Type: A
DNSltsrqqxqifss.com
Type: A
DNSltsrqqxqifss.net
Type: A
DNSltsrqqxqifss.info
Type: A
DNSltsrqqxqifss.su
Type: A
DNSployyvwencef.com
Type: A
DNSployyvwencef.net
Type: A
DNSployyvwencef.info
Type: A
DNSployyvwencef.su
Type: A
DNSyxggnssifwpc.com
Type: A
DNSyxggnssifwpc.net
Type: A
DNSyxggnssifwpc.info
Type: A
DNSyxggnssifwpc.su
Type: A
DNSqimgkfgdecbf.com
Type: A
DNSqimgkfgdecbf.net
Type: A
DNSqimgkfgdecbf.info
Type: A
DNSqimgkfgdecbf.su
Type: A
DNSwyqwskhdlcwv.com
Type: A
DNSwyqwskhdlcwv.net
Type: A
DNSwyqwskhdlcwv.info
Type: A
DNSwyqwskhdlcwv.su
Type: A
DNSqqcskpddwnvo.com
Type: A
DNSqqcskpddwnvo.net
Type: A
DNSqqcskpddwnvo.info
Type: A
DNSqqcskpddwnvo.su
Type: A
DNSruxwxtuxolmn.com
Type: A
DNSruxwxtuxolmn.net
Type: A
DNSruxwxtuxolmn.info
Type: A
DNSruxwxtuxolmn.su
Type: A
DNSeicpjgqyyppi.com
Type: A
DNSeicpjgqyyppi.net
Type: A
DNSeicpjgqyyppi.info
Type: A
DNSeicpjgqyyppi.su
Type: A
DNSvdgtuqcufvwn.com
Type: A
DNSvdgtuqcufvwn.net
Type: A
DNSvdgtuqcufvwn.info
Type: A
DNSvdgtuqcufvwn.su
Type: A
DNSoskcmmxwngrc.com
Type: A
DNSoskcmmxwngrc.net
Type: A
DNSoskcmmxwngrc.info
Type: A
DNSoskcmmxwngrc.su
Type: A
DNSvofpujirsbsp.com
Type: A
DNSvofpujirsbsp.net
Type: A
DNSvofpujirsbsp.info
Type: A
DNSvofpujirsbsp.su
Type: A
DNSxdkbuhchgwsx.com
Type: A
DNSxdkbuhchgwsx.net
Type: A
DNSxdkbuhchgwsx.info
Type: A
DNSxdkbuhchgwsx.su
Type: A
DNSimrwofvnjdld.com
Type: A
DNSimrwofvnjdld.net
Type: A
DNSimrwofvnjdld.info
Type: A
DNSimrwofvnjdld.su
Type: A
DNSfytxkkmjkxxi.com
Type: A
DNSfytxkkmjkxxi.net
Type: A
DNSfytxkkmjkxxi.info
Type: A
DNSfytxkkmjkxxi.su
Type: A
DNSpxyynymwijrq.com
Type: A
DNSpxyynymwijrq.net
Type: A
DNSpxyynymwijrq.info
Type: A
DNSpxyynymwijrq.su
Type: A
DNSfkhgmeqqpyjq.com
Type: A
DNSfkhgmeqqpyjq.net
Type: A
DNSfkhgmeqqpyjq.info
Type: A
DNSfkhgmeqqpyjq.su
Type: A
DNSqlygccnvwlek.com
Type: A
DNSqlygccnvwlek.net
Type: A
DNSqlygccnvwlek.info
Type: A
DNSqlygccnvwlek.su
Type: A
DNSrommwthhsbfj.com
Type: A
DNSrommwthhsbfj.net
Type: A
DNSrommwthhsbfj.info
Type: A
DNSrommwthhsbfj.su
Type: A
DNSpevwdgfqjjnj.com
Type: A
DNSpevwdgfqjjnj.net
Type: A
DNSpevwdgfqjjnj.info
Type: A
DNSpevwdgfqjjnj.su
Type: A
DNSrqptirslgfih.com
Type: A
DNSrqptirslgfih.net
Type: A
DNSrqptirslgfih.info
Type: A
DNSrqptirslgfih.su
Type: A
DNSdglvedcsskxi.com
Type: A
DNSdglvedcsskxi.net
Type: A
DNSdglvedcsskxi.info
Type: A
DNSdglvedcsskxi.su
Type: A
DNShxmesphycssk.com
Type: A
DNShxmesphycssk.net
Type: A
DNShxmesphycssk.info
Type: A
DNShxmesphycssk.su
Type: A
DNSprhndyejhwny.com
Type: A
DNSprhndyejhwny.net
Type: A
DNSprhndyejhwny.info
Type: A
DNSprhndyejhwny.su
Type: A
DNStsknkwxpqxyx.com
Type: A
DNStsknkwxpqxyx.net
Type: A
DNStsknkwxpqxyx.info
Type: A
DNStsknkwxpqxyx.su
Type: A
DNStditslmpwrmn.com
Type: A
DNStditslmpwrmn.net
Type: A
DNStditslmpwrmn.info
Type: A
DNStditslmpwrmn.su
Type: A
DNSmueunmnfnodf.com
Type: A
DNSmueunmnfnodf.net
Type: A
DNSmueunmnfnodf.info
Type: A
DNSmueunmnfnodf.su
Type: A
DNSnschefedyutm.com
Type: A
DNSnschefedyutm.net
Type: A
DNSnschefedyutm.info
Type: A
DNSnschefedyutm.su
Type: A
DNSlijnfvnbkkkd.com
Type: A
DNSlijnfvnbkkkd.net
Type: A
DNSlijnfvnbkkkd.info
Type: A
DNSlijnfvnbkkkd.su
Type: A
DNSjnomyyrkmmmx.com
Type: A
DNSjnomyyrkmmmx.net
Type: A
DNSjnomyyrkmmmx.info
Type: A
DNSjnomyyrkmmmx.su
Type: A
DNSvnswgpgwqjux.com
Type: A
DNSvnswgpgwqjux.net
Type: A
DNSvnswgpgwqjux.info
Type: A
DNSvnswgpgwqjux.su
Type: A
DNSytbkjwjrjwhp.com
Type: A
DNSytbkjwjrjwhp.net
Type: A
DNSytbkjwjrjwhp.info
Type: A
DNSytbkjwjrjwhp.su
Type: A
DNSrdyfndxpvvfj.com
Type: A
DNSrdyfndxpvvfj.net
Type: A
DNSrdyfndxpvvfj.info
Type: A
DNSrdyfndxpvvfj.su
Type: A
DNSsnpgwwnyyutl.com
Type: A
DNSsnpgwwnyyutl.net
Type: A
DNSsnpgwwnyyutl.info
Type: A
DNSsnpgwwnyyutl.su
Type: A
DNSvxkhycttwtkk.com
Type: A
DNSvxkhycttwtkk.net
Type: A
DNSvxkhycttwtkk.info
Type: A
DNSvxkhycttwtkk.su
Type: A
DNSdebcfekskgxm.com
Type: A
DNSdebcfekskgxm.net
Type: A
DNSdebcfekskgxm.info
Type: A
DNSdebcfekskgxm.su
Type: A
DNSiowknmjccpew.com
Type: A
DNSiowknmjccpew.net
Type: A
DNSiowknmjccpew.info
Type: A
DNSiowknmjccpew.su
Type: A
DNSxovoctqvypqf.com
Type: A
DNSxovoctqvypqf.net
Type: A
DNSxovoctqvypqf.info
Type: A
DNSxovoctqvypqf.su
Type: A
DNStvonmporjjbp.com
Type: A
DNStvonmporjjbp.net
Type: A
DNStvonmporjjbp.info
Type: A
DNStvonmporjjbp.su
Type: A
DNSdmfvyxwviegy.com
Type: A
DNSdmfvyxwviegy.net
Type: A
DNSdmfvyxwviegy.info
Type: A
DNSdmfvyxwviegy.su
Type: A
DNSpssisioeeviu.com
Type: A
DNSpssisioeeviu.net
Type: A
DNSpssisioeeviu.info
Type: A
DNSpssisioeeviu.su
Type: A
DNShcpdhhdvidcs.com
Type: A
DNShcpdhhdvidcs.net
Type: A
DNShcpdhhdvidcs.info
Type: A
DNShcpdhhdvidcs.su
Type: A
DNSenhmiipppeps.com
Type: A
DNSenhmiipppeps.net
Type: A
DNSenhmiipppeps.info
Type: A
DNSenhmiipppeps.su
Type: A
DNSmpqcwxxpvqrh.com
Type: A
DNSmpqcwxxpvqrh.net
Type: A
DNSmpqcwxxpvqrh.info
Type: A
DNSmpqcwxxpvqrh.su
Type: A
DNSqpwrgkmluxin.com
Type: A
DNSqpwrgkmluxin.net
Type: A
DNSqpwrgkmluxin.info
Type: A
DNSqpwrgkmluxin.su
Type: A
DNSrkytqbgvtdpy.com
Type: A
DNSrkytqbgvtdpy.net
Type: A
DNSrkytqbgvtdpy.info
Type: A
DNSrkytqbgvtdpy.su
Type: A
DNSligmeektuyxl.com
Type: A
DNSligmeektuyxl.net
Type: A
DNSligmeektuyxl.info
Type: A
DNSligmeektuyxl.su
Type: A
DNSjcpsrvvoeipu.com
Type: A
DNSjcpsrvvoeipu.net
Type: A
DNSjcpsrvvoeipu.info
Type: A
DNSjcpsrvvoeipu.su
Type: A
DNSccrvrgjvisqb.com
Type: A
DNSccrvrgjvisqb.net
Type: A
DNSccrvrgjvisqb.info
Type: A
DNSccrvrgjvisqb.su
Type: A
DNSvfwcgglownme.com
Type: A
DNSvfwcgglownme.net
Type: A
DNSvfwcgglownme.info
Type: A
DNSvfwcgglownme.su
Type: A
DNSqlqpphvrutuq.com
Type: A
DNSqlqpphvrutuq.net
Type: A
DNSqlqpphvrutuq.info
Type: A
DNSqlqpphvrutuq.su
Type: A
DNSropolwfbqypy.com
Type: A
DNSropolwfbqypy.net
Type: A
DNSropolwfbqypy.info
Type: A
DNSropolwfbqypy.su
Type: A
DNSponihlltslhi.com
Type: A
DNSponihlltslhi.net
Type: A
DNSponihlltslhi.info
Type: A
DNSponihlltslhi.su
Type: A
DNSpgvipsrkhkjn.com
Type: A
DNSpgvipsrkhkjn.net
Type: A
DNSpgvipsrkhkjn.info
Type: A
DNSpgvipsrkhkjn.su
Type: A
DNStoqnotmvwtsj.com
Type: A
DNStoqnotmvwtsj.net
Type: A
DNStoqnotmvwtsj.info
Type: A
DNStoqnotmvwtsj.su
Type: A
DNSxwsvusxqjbud.com
Type: A
DNSxwsvusxqjbud.net
Type: A
DNSxwsvusxqjbud.info
Type: A
DNSxwsvusxqjbud.su
Type: A
DNSqyenclcyqfvd.com
Type: A
DNSqyenclcyqfvd.net
Type: A
DNSqyenclcyqfvd.info
Type: A
DNSqyenclcyqfvd.su
Type: A
DNSotwvuyxtonqp.com
Type: A
DNSotwvuyxtonqp.net
Type: A
DNSotwvuyxtonqp.info
Type: A
DNSotwvuyxtonqp.su
Type: A
DNSvvqhxkybbebn.com
Type: A
DNSvvqhxkybbebn.net
Type: A
DNSvvqhxkybbebn.info
Type: A
DNSvvqhxkybbebn.su
Type: A
HTTP POSThttp://frvnobpkkogv.com/previews/
User-Agent:
HTTP POSThttp://frvnobpkkogv.info/previews/
User-Agent:
HTTP POSThttp://pdjmvyykibjm.com/previews/
User-Agent:
HTTP POSThttp://pdjmvyykibjm.info/previews/
User-Agent:
HTTP POSThttp://qptdnsbexqgh.com/previews/
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 5.2.189.251:80
Flows TCP192.168.1.1:1032 ➝ 185.20.227.115:80
Flows TCP192.168.1.1:1033 ➝ 82.165.37.127:80
Flows TCP192.168.1.1:1034 ➝ 173.44.130.42:80
Flows TCP192.168.1.1:1035 ➝ 95.211.230.75:80

Raw Pcap
0x00000000 (00000)   504f5354 202f7072 65766965 77732f20   POST /previews/ 
0x00000010 (00016)   48545450 2f312e30 0d0a486f 73743a20   HTTP/1.0..Host: 
0x00000020 (00032)   6672766e 6f62706b 6b6f6776 2e636f6d   frvnobpkkogv.com
0x00000030 (00048)   0d0a436f 6e74656e 742d4c65 6e677468   ..Content-Length
0x00000040 (00064)   3a203135 370d0a0d 0a6f5f69 065a5f69   : 157....o_i.Z_i
0x00000050 (00080)   067def6c ce6a5e68 1d3c1a26 066f5f69   .}.l.j^h.<.&.o_i
0x00000060 (00096)   06                                    .

0x00000000 (00000)   504f5354 202f7072 65766965 77732f20   POST /previews/ 
0x00000010 (00016)   48545450 2f312e30 0d0a486f 73743a20   HTTP/1.0..Host: 
0x00000020 (00032)   6672766e 6f62706b 6b6f6776 2e696e66   frvnobpkkogv.inf
0x00000030 (00048)   6f0d0a43 6f6e7465 6e742d4c 656e6774   o..Content-Lengt
0x00000040 (00064)   683a2031 35370d0a 0d0aa778 16449278   h: 157.....x.D.x
0x00000050 (00080)   1644b5c8 138ca279 175ff43d 5944a778   .D.....y._.=YD.x
0x00000060 (00096)   1644                                  .D

0x00000000 (00000)   504f5354 202f7072 65766965 77732f20   POST /previews/ 
0x00000010 (00016)   48545450 2f312e30 0d0a486f 73743a20   HTTP/1.0..Host: 
0x00000020 (00032)   70646a6d 7679796b 69626a6d 2e636f6d   pdjmvyykibjm.com
0x00000030 (00048)   0d0a436f 6e74656e 742d4c65 6e677468   ..Content-Length
0x00000040 (00064)   3a203135 370d0a0d 0a97f2b6 98a2f2b6   : 157...........
0x00000050 (00080)   988542b3 5092f3b7 83c4b7f9 9897f2b6   ..B.P...........
0x00000060 (00096)   98                                    .

0x00000000 (00000)   504f5354 202f7072 65766965 77732f20   POST /previews/ 
0x00000010 (00016)   48545450 2f312e30 0d0a486f 73743a20   HTTP/1.0..Host: 
0x00000020 (00032)   70646a6d 7679796b 69626a6d 2e696e66   pdjmvyykibjm.inf
0x00000030 (00048)   6f0d0a43 6f6e7465 6e742d4c 656e6774   o..Content-Lengt
0x00000040 (00064)   683a2031 35370d0a 0d0a0720 3e253120   h: 157..... >%1 
0x00000050 (00080)   3e251590 3bed0221 3f3e5465 71250720   >%..;..!?>Teq%. 
0x00000060 (00096)   3e25                                  >%

0x00000000 (00000)   504f5354 202f7072 65766965 77732f20   POST /previews/ 
0x00000010 (00016)   48545450 2f312e30 0d0a486f 73743a20   HTTP/1.0..Host: 
0x00000020 (00032)   71707464 6e736265 78716768 2e636f6d   qptdnsbexqgh.com
0x00000030 (00048)   0d0a436f 6e74656e 742d4c65 6e677468   ..Content-Length
0x00000040 (00064)   3a203135 370d0a0d 0a0d17c4 9f3b17c4   : 157........;..
0x00000050 (00080)   9f1fa7c1 570816c5 845e528b 9f0d17c4   ....W....^R.....
0x00000060 (00096)   9f                                    .


Strings