blackhil.ddns.net
Classification: Malicious
blackhil.ddns.net is a malicious hostname. Linked to Nanocore malware. 3 sightings from Hybrid-Analysis and ThreatFox Abuse.ch, last seen 2023-09-29.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 08:37:52.
MITRE ATT&CK associations
Malware families: NANOCORE (S0336)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Nanocore RAT | ThreatFox Abuse.ch | 2023-09-27 18:39:38 | 2023-09-29 18:27:28 | malicious-activity | S0336 NanoCore |
| Trojan.Generic | Hybrid-Analysis | 2020-03-31 19:15:18 | 2020-03-31 19:15:18 | ||
| JS.Nemucod | Hybrid-Analysis | 2020-02-23 14:45:17 | 2020-02-23 14:45:17 |
Tags
c2 historicalandnew nanocore rat nancratIP addresses resolved by this hostname
- 105.112.56.74 (2020-02-23 14:45:17)
- 0.0.0.0 (2026-10-17 08:37:52)
Whois information
- AS name
- AS36873 Celtel Nigeria Limited t.a ZAIN
- Domain
- ddns.net
- TLD
- net
- First indexed
- 2020-02-23 14:45:17
- Last updated
- 2026-10-17 08:37:52