anderchuka.duckdns.org
Classification: Malicious
anderchuka.duckdns.org is a malicious hostname. Linked to Nanocore malware. 4 sightings from Hybrid-Analysis and ThreatFox Abuse.ch, last seen 2023-09-29.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:37:06.
MITRE ATT&CK associations
Malware families: NANOCORE (S0336)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Nanocore RAT | ThreatFox Abuse.ch | 2023-09-27 18:41:56 | 2023-09-29 18:24:32 | malicious-activity | S0336 NanoCore |
| Injector.DWD | Hybrid-Analysis | 2019-04-16 11:32:07 | 2019-04-16 11:32:07 | ||
| AIT:Trojan.Agent | Hybrid-Analysis | 2019-04-11 14:30:17 | 2019-04-11 14:30:17 | ||
| AGEN.1000255 | Hybrid-Analysis | 2019-04-09 14:15:28 | 2019-04-09 14:15:28 |
Tags
c2 historicalandnew nanocore rat nancratIP addresses resolved by this hostname
- 77.48.28.201 (2019-04-09 14:15:28)
- 185.244.31.9 (2026-10-18 04:37:06)
Whois information
- AS name
- AS6830 Liberty Global Operations B.V.
- Domain
- duckdns.org
- TLD
- org
- First indexed
- 2019-04-09 14:15:28
- Last updated
- 2026-10-18 04:37:06