Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 103.121.123.61 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:103.121.123.61
Hostname:n/a
AS number:AS138059
AS name:IDNIC-PEMKAB-PURWOREJO-AS-ID PEMERINTAH KABUPATEN PURWOREJO
Country:- ID
First seen:2021-09-08 14:30:41 UTC
Last online:2021-11-30 18:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse complaint sent?Last online (UTC)
2021-09-08 14:30:41103.121.123.61443
Dridex
Offline
Yes (2021-11-30 15:05:02 UTC)2021-11-30 18:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 103.121.123.61. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-09-08 14:35:181ed5cbdcf881120034d81d5a46399341DLL dlln/a
Dridex
2021-09-08 14:34:5440881eb97de5d69dd8da5f2d894874d9DLL dllVirustotal results 20.90%
Dridex
2021-09-08 14:34:06c5ac37fbe684e1a02f20aa99e599b266DLL dllVirustotal results 20.90%
Dridex
2021-09-08 14:33:32634f35cee79bcb2565a3e831e2f7efc4DLL dllVirustotal results 22.39%
Dridex
2021-09-08 14:33:03afd2709695bb2cfe3fc43318e5b11f84DLL dllVirustotal results 20.90%
Dridex
2021-09-08 14:32:5795f58081bf238bb8fe32127e84c9eff6DLL dllVirustotal results 21.21%
Dridex
2021-09-08 13:43:21cc064043229bad8f94a41de8a6ce8721Word file xlsxVirustotal results 3.33%
Dridex
2021-09-08 13:42:49e0251b258f1478b39579f4b4935cbc14DLL dllVirustotal results 28.79%
Dridex
2021-09-08 13:42:2258453775d0dbe884f907f3b58a117192Word file xlsxVirustotal results 8.06%
Dridex