Domain > hit.edu.cn

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to hit.edu.cn

MD5	A/V
99877f98e6f3e7f7bb8e63cc97991917	[W32/Plemood.A.worm] [W32/Pupil] [Win32.PurpleMood.A] [W32/SecRisk-ProcessPatcher-Sml-based!Maximus] [Win32:Pupil] [Worm.Plemood.A] [Email-Worm.Win32.Plemood] [Win32.Purple.6740] [Sus/UnkPacker] [Virus:Win32/Purplemood.A] [Win32/Plemood.worm.7680.B] [Worm.Mail.Plemood.a] [W32/Plemood.A@mm] [I-Worm/Plemood.F]
42c6ca519deae352a61a86f9ae80d6e1	[W32.HfsAutoB.51e8] [Worm/W32.Plemood.7680.B] [Email-Worm.Win32!O] [I-Worm.Plemood.n1] [W32/Pupil] [Backdoor.Purplemood] [W32/Plemood] [Trojan.Win32.Plemood.crtnrb] [W32/A-ef5ca5b5!Eldorado] [Obfuscated_FA] [WORM_PLEMOOD.SM] [Win32:Pupil] [Worm.Plemood.A] [Email-Worm.Win32.Plemood] [Win32.Plemood.B] [I-Worm.Win32.A.Plemood.7680] [EmailWorm.Win32.Plemood.ai001] [Win32.Purple.6740] [Heuristic.LooksLike.Win32.Suspicious.J!87] [W32/Purple-A] [Worm/Plemood.c] [Win32.Saynob.a.4096] [Virus:Win32/Purplemood.A] [W32/SecRisk-ProcessPatcher-Sml-] [Win32/Plemood.worm.7680.B] [W32/Plemood.A.worm] [PE:Worm.Mail.Plemood.a!1073874584] [W32/Plemood.EMW!tr] [I-Worm/Plemood.F] [Worm.Win32.Plemood.AvU]
819d70cd8c196db48a6db370059f8ec2	[Worm/W32.Plemood.7680.B] [I-Worm.Plemood.n1] [W32/Pupil] [W32/Plemood] [EmailWorm] [Trojan] [Trojan.Win32.Plemood.ilomb] [W32/SecRisk-ProcessPatcher-Sml-] [Obfuscated_FA] [Win32/Purplemood.A] [WORM_PLEMOOD.SM] [Win32:Pupil] [Worm.Plemood.A] [Email-Worm.Win32.Plemood] [Win32.Plemood.J] [Win32.Plemood.B] [I-Worm.Win32.Plemood.7677] [EmailWorm.Win32.Plemood.ai001] [Win32.Purple.6740] [Heuristic.LooksLike.Win32.Suspicious.J!87] [W32/Purple-A] [I-Worm/Nulprot.cz] [Win32.Saynob.a.4096] [Virus:Win32/Purplemood.A] [Worm.PurpleMood] [Win32/Plemood.worm.7680.B] [Email-Worm.Plemood] [Malware.W95-Doggie] [Worm.Mail.Plemood.a] [W32/Plemood.A@mm] [I-Worm/Plemood.F] [W32/Plemood.A.worm]
62902ad0bee8c3fafe631431130d1c50	[Worm/W32.Plemood.7680.B] [I-Worm.Plemood.n1] [W32/Pupil] [Trojan] [W32/Plemood] [Trojan.Win32.Plemood.ilomb] [W32/SecRisk-ProcessPatcher-Sml-] [Obfuscated_FA] [Win32/Purplemood.A] [WORM_PLEMOOD.SM] [Win32:Pupil] [Worm.Plemood.A] [Email-Worm.Win32.Plemood] [Win32.Plemood.J] [Win32.Plemood.B] [I-Worm.Win32.Plemood.7677] [EmailWorm.Win32.Plemood.ai001] [Win32.Purple.6740] [Heuristic.LooksLike.Win32.Suspicious.J!87] [W32/Purple-A] [I-Worm/Nulprot.cz] [Win32.Saynob.a.4096] [Virus:Win32/Purplemood.A] [Worm.PurpleMood] [Win32/Plemood.worm.7680.B] [Email-Worm.Plemood] [Malware.W95-Doggie] [Worm.Mail.Plemood.a] [W32/Plemood.A@mm] [I-Worm/Plemood.F] [W32/Plemood.A.worm]
30302c14f6c479378d6e7d2631fe184d	[W32.HfsAutoB.3bcb] [Win32.Plemood.J] [Worm/W32.Plemood.7680.B] [Email-Worm.Win32!O] [I-Worm.Plemood.n1] [W32/Pupil] [W32/Plemood] [Win32.Plemood.B] [W32/SecRisk-ProcessPatcher-Sml-] [Obfuscated_FA] [Win32/Purplemood.A] [WORM_PLEMOOD.SM] [Win32:Pupil] [Worm.Plemood.A] [Email-Worm.Win32.Plemood] [Trojan.Win32.Plemood.bxglb] [I-Worm.Win32.Plemood.7677] [EmailWorm.Win32.Plemood.ai001] [Win32.Purple.6740] [Heuristic.LooksLike.Win32.Suspicious.J!87] [W32/Purple-A] [I-Worm/Nulprot.cz] [Win32.Saynob.a.4096] [Virus:Win32/Purplemood.A] [Worm.PurpleMood] [Email-Worm.Plemood] [W32/Plemood.A.worm] [PE:Worm.Mail.Plemood.a!1073874584] [W32/Plemood.A@mm] [I-Worm/Plemood.F] [Worm.Win32.Plemood.alf] [Win32/Trojan.cd8]
54048823c04a0d4783cc470d392052e6	[W32.HfsAutoB.3bcb] [Win32.Plemood.J] [Worm/W32.Plemood.7680.B] [Email-Worm.Win32!O] [I-Worm.Plemood.n1] [W32/Pupil] [Backdoor.Purplemood] [W32/Plemood] [Trojan.Win32.Plemood.bxglb] [W32/A-ef5ca5b5!Eldorado] [Obfuscated_FA] [Win32/Purplemood.A] [WORM_PLEMOOD.SM] [Win32:Pupil] [Worm.Plemood.A] [Email-Worm.Win32.Plemood] [Win32.Plemood.B] [I-Worm.Win32.Plemood.7677] [PE:Worm.Mail.Plemood.a!1073874584] [EmailWorm.Win32.Plemood.ai001] [Win32.Purple.6740] [Virus.Plemood.Win32.1] [Heuristic.LooksLike.Win32.Suspicious.J!87] [W32/Purple-A] [I-Worm/Nulprot.cz] [Win32.Saynob.a.4096] [Virus:Win32/Purplemood.A] [Worm.PurpleMood] [Win32/Plemood.worm.7680.B] [W32/SecRisk-ProcessPatcher-Sml-] [Email-Worm.Plemood] [W32/Plemood.A.worm] [Win32.Worm-Email.Plemood.bfvg] [W32/Plemood.EMW!tr] [I-Worm/Plemood.F] [Win3]
1814b7b23eb11690edc52944f7eb4b3c	[Win32.Plemood.J] [Worm/W32.Plemood.7680.B] [I-Worm.Plemood.n1] [W32/Pupil] [Trojan] [W32/Plemood] [W32/SecRisk-ProcessPatcher-Sml-based!Maximus] [W32/Obfuscated.FA] [Win32/Purplemood.A] [WORM_PLEMOOD.SM] [Win32:Pupil] [Win32.TRCrypt.XPACK] [Worm.Plemood.A] [Email-Worm.Win32.Plemood] [Win32.Plemood.B] [I-Worm.Win32.A.Plemood.7680] [Email-Worm.Win32.Plemood!IK] [EmailWorm.Win32.Plemood.ai001] [Win32.Purple.6740] [Heuristic.LooksLike.Win32.Suspicious.J!87] [Sus/UnkPacker] [I-Worm/Nulprot.cz] [Win32.Saynob.a.4096] [Virus:Win32/Purplemood.A] [Win32/Plemood.worm.7680.B] [Malware.W95-Doggie] [Worm.Mail.Plemood.a] [W32/Plemood.A@mm] [I-Worm/Plemood.F] [W32/Plemood.A.worm]

DNS Resolutions

Date	IP Address
2012-11-06	219.217.226.134 (ClassC)
2013-09-16	202.118.251.55 (ClassC)
2013-12-25	61.167.60.52 (ClassC)
2014-04-28	219.217.227.31 (ClassC)
2014-06-06	219.217.227.112 (ClassC)
2024-12-28	202.118.254.135 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
hit01.hit.edu.cn	2024-10-28	202.118.224.100
hit03.hit.edu.cn	2024-12-24	61.167.60.80
pact518.hit.edu.cn	2014-07-23	202.118.236.130
www.hit.edu.cn	2024-11-27	61.167.60.70

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]