khit.cn

Domain Information

Server location:
Liaoning, China (CN)

ASN:
AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone,CN

Scanner detections:
Detections  (88% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Downloader (M)
81.25%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, Malware-Cryptor.Inject.gen
43.75%

Trend Micro House Call
TROJ_GEN.F47V0319, TROJ_GEN.F47V0518, Suspicious_GEN.F47V0130, Suspicious_GEN.F47V0301, Suspicious_GEN.F47V0826
31.25%

K7 Gateway Antivirus
Unwanted-File , Unwanted-Program
31.25%

McAfee
Artemis!09C9A9A79E04, Artemis!093F746798DF, Artemis!FD7114559E9D, Trojan.Artemis!1D2464B9FD32
25.00%

McAfee Web Gateway
Artemis!09C9A9A79E04, Artemis!093F746798DF
18.75%

K7 AntiVirus
Trojan-Downloader , Unwanted-Program
12.50%

avast!
Win32:Rootkit-gen [Rtk], Win32:Malware-gen
12.50%

Kaspersky
Trojan-Downloader.NSIS.Chindo
12.50%

IKARUS anti.virus
Trojan.Win32.Pincav, Trojan-Downloader.Chindo
12.50%

Dr.Web
Trojan.KillFiles.28526
12.50%

Clam AntiVirus
Win.Trojan.15173305
12.50%

F-Prot
W32/Zlob.AF.gen
6.25%

Kingsoft AntiVirus
VIRUS_UNKNOWN
6.25%

Commtouch SDK
W32/Zlob.AF.gen!Eldorado
6.25%

The domain khit.cn has been seen to resolve to the following 61 IP addresses.

August 27, 2016

July 25, 2016

July 25, 2016

July 25, 2016

July 25, 2016

July 25, 2016

July 25, 2016

July 25, 2016

June 7, 2016

June 6, 2016

May 18, 2016

May 18, 2016

July 7, 2015

July 7, 2015

42.171.204.221.adsl-pool.sx.cn
July 7, 2015

18.23.204.221.adsl-pool.sx.cn
July 7, 2015

cncln.online.ln.cn
July 7, 2015

July 7, 2015

May 5, 2015

May 5, 2015

16.23.204.221.adsl-pool.sx.cn
May 5, 2015

May 5, 2015

May 4, 2015

May 4, 2015

December 2, 2014

December 2, 2014

December 2, 2014

December 2, 2014

26.21.204.221.adsl-pool.sx.cn
October 20, 2014

October 20, 2014

 
Showing 30 of 61 IP Addresses

File downloads found at URLs served by khit.cn.

1 / 68      (PUP)
http://khit.cn/Setup_3d66.com.exe  (setup_3dm.com.exe)

4 / 68      (PUP)
http://khit.cn/Setup_cncrk.com.exe  (setup_yingshi3.exe)

0 / 68
http://khit.cn/.../RlDateSet.exe  (f8a99c9adb6e068ba08cbbb27ba59cf3)

4 / 68      (inconclusive)

8 / 68      (PUP)
http://khit.cn/Setup_ali2131.net.exe  (1d2464b9fd32b2ebe921897750afec15)

2 / 68      (PUP)
http://khit.cn/Setup_qiqibudy.com.exe  (setup_yxdown.com.exe)

2 / 68      (PUP)
http://khit.cn/Setup_ali213.net.exe  (setup_qindou.net.exe)

2 / 68      (PUP)

4 / 68      (PUP)
http://khit.cn/Setup_cncrk.com.exe  (尚未確認的 588533.crdownload)

4 / 68      (PUP)

6 / 68      (Malware)
http://khit.cn/Setup_8edy.com.exe  (setup_2tu.cc.exe)

2 / 68      (PUP)
http://khit.cn/Setup_xixi.com.exe  (setup_yxdown.com.exe)

2 / 68      (PUP)

2 / 68      (PUP)

3 / 68      (PUP)
http://khit.cn/Setup_3dm.com.exe  (01a20131256c2f0043f34afb9057a098)

3 / 68      (PUP)

9 / 68      (PUP)
http://khit.cn/Setup_ffdy.cc.exe  (09c9a9a79e047905d99eb13162f668fc)

The following 6 files have been seen to comunicate with khit.cn in live environments.