Domain > config.kuwo.cn

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to config.kuwo.cn

MD5	A/V
636af7b5bcadf1a05c9339f450d7ba26	[Trojan.StartPage] [Trojan.Win32.TrojObfusc.csyffs] [W32/Heuristic-210!Eldorado] [Startpage.WTF] [TROJ_GE.72C3CCAD]
a79d8f8ba07eb21c2b2054f9dfecb5c7	[W32/Heuristic-210!Eldorado] [Trojan.Win32.TrojObfusc.csyffs]
24232e92790c97fb84a9f51912213e6f	[W32/Heuristic-210!Eldorado] [Trojan.Win32.TrojObfusc.csyffs]
4c724e789634c9873ccd1b5d49dea5c8	[Trojan.Packed.25266] [Downware.InstallCore]
f6aac942573f0e7751aeb93bba66928f	[Artemis!F6AAC942573F] [W32/Heuristic-210!Eldorado]
42a5dfcb488b4ee7cf0b2aff246e0972	[Artemis!42A5DFCB488B] [Trojan.Win32.TrojObfusc.csyffs] [W32/Heuristic-210!Eldorado]
edf54b686ebc6467b730eb35185a3cca	[W32/Heuristic-210!Eldorado] [Trojan.Win32.TrojObfusc.csyffs]
1eb278f1d9aecfb04fa818defc6fc7d0	[Artemis!1EB278F1D9AE] [W32/Heuristic-210!Eldorado] [Trojan.Win32.TrojObfusc.csyffs]
4899f83c1e87ac8113de39bd77ad5adb	[Artemis!4899F83C1E87] [W32/Heuristic-210!Eldorado] [Trojan.Win32.TrojObfusc.csyffs]
8c6d40267ef06135a9d2f6cc75254082	[Artemis!8C6D40267EF0] [PUP.Optional.OpenCandy] [Riskware.OpenCandy!] [Adware.Downware.1446] [APPL/Sevas.I] [OpenCandy] [PUP/Win32.OpenCandy] [Win32/OpenCandy] [PE:PUF.OpenCandy!1.9DE5] [Downloader.ASQ] [Sevas.204]
307126a97ae0c36c13a7058fcdad5428
b2372cb4c388ecd2dcccbc6281db29c9	[Downloader-FRK!B2372CB4C388] [Trojan.Downloader] [Downloader] [GMUnpackerInstaller.A] [Win32/Tnega.CfCAeIB] [TROJ_SPNR.08LC13] [Application.Win32.GMUnpackerInstaller.AFR] [Trojan.DownLoader10.13268] [Heuristic.BehavesLike.Win32.Suspicious.P] [Trojan[:HEUR]/Win32.Unknown] [Win32.Trojan-Downloader.GMUnpackerInstaller.A] [PE:PUF.GMUnpackerInstaller!1.9C4F] [Win32.Malware] [HackTool.Win32.Downloader.ABux] [Win32/Virus.Downloader.878]
ff0d4cf41b2794babf227c7bfca1f62a	[Trojan.PWS.LDPinch!CupK3+Np1Ls] [Kryptik.CEGF] [Trojan.Win32.LDPinch.dhzime] [Trojan.PWS.LDPinch.12075] [W32/Heuristic-300!Eldorado] [Artemis!FF0D4CF41B27]
2c401290f31895642157a8c6093c9f7d	[Artemis!2C401290F318] [PUP.Optional.Somoto.A] [Trojan.Nsis.Mazel.cwhyud] [Application.Win32.Somoto.DTL] [Trojan.MulDrop4.11744] [Heuristic.BehavesLike.Win32.Suspicious.A] [Riskware[:not-a-virus]/Win32.Mazel.a] [NSIS.Application.Somoto.F] [Win-AppCare/Somoto.236952.E] [Adware.Win32.Somoto.N] [Win32/Somoto.N] [Downloader.ATW] [PUP/MultiToolbar.A] [Win32/Virus.Downloader.394]
2e56f86198008d882cfd1489810f6bec	[W32/Heuristic-210!Eldorado] [Packed_Upack.H] [Cryp_Upack]
8af9f7597c23231d876ac691f587004e	[Artemis!8AF9F7597C23] [Trojan.Win32.TrojObfusc.csyffs] [W32/Heuristic-210!Eldorado]
89bf17c25d2e78ca6fba35580d768740	[Artemis!89BF17C25D2E] [Trojan.PWS.LDPinch!CupK3+Np1Ls]
377a1e7384d788d29ac33c59ca79638e	[Downloader.Banload.Win32.67984] [BehavesLike.Win32.BadFile.rc]
fca27d8a724c71d5a4584944e9e57b6e	[BehavesLike.Win32.Tool.rc] [W32/Heuristic-300!Eldorado] [Artemis!FCA27D8A724C]
2be7e555a465eb168c8f32305e1faea1

Whois

Property	Value
Organization	北京酷我科技有限公司
Email	un02@koowo.com
NameServer	ns4.koowo.com

DNS Resolutions

Date	IP Address
2014-07-14	60.28.201.180 (ClassC)
2024-04-20	101.42.128.221 (ClassC)
2024-10-02	101.42.130.103 (ClassC)
2025-07-23	101.42.133.54 (ClassC)
2025-08-03	101.42.130.11 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]