Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 103.144.201.56 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	103.144.201.56
Hostname:	n/a
AS number:	AS139762
AS name:	MSSOLUTION-AS-AP Solution
Country:	BD
First seen:	2023-04-15 04:02:13 UTC
Last online:	2023-05-31 09:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 103.144.201.56. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2023-05-30 20:45:59	ab8ef3423324168d06b2d122f75ca130	msi	3.77%	n/a
2023-05-30 20:45:54	e35727b10193fe55df216a1f9d166997	msi	5.00%	n/a
2023-05-30 15:54:44	665afc8f8b7972f427fe1bd90d263032	msi	n/a	n/a
2023-04-20 16:28:32	45f241fd144ec617a7610cb4edc51f30	dll	21.31%	n/a
2023-04-14 07:23:44	a76e4ef5920c368297cc466456925dad	dll	n/a	Quakbot
2023-04-14 06:00:52	938b1575d22415e78bf5901bb8e111ae	dll	n/a	Quakbot
2023-04-14 03:17:36	fd00989001b98bc45166ba56b0a05ec7	dll	n/a	Quakbot
2023-04-14 02:13:05	aa9c7cbdc2c1f2f61a82e67f02148390	wsf	n/a	Quakbot
2023-04-14 00:53:33	aad6af83cd928102fc0ba76cf69ee58f	dll	n/a	Quakbot
2023-04-13 23:24:45	966e04d1ed2184ab72cce34eefaea56a	dll	n/a	Quakbot
2023-04-13 23:00:37	6a941ca84a6c46c41c0b1aae7bb2743c	dll	n/a	Quakbot
2023-04-13 22:29:01	33920d7231acb59cb30f6d11dc67ade7	dll	n/a	Quakbot
2023-04-13 20:33:20	2814000cd589a5626a036e063b5e3335	wsf	n/a	Quakbot
2023-04-13 18:54:59	e0f39689a0854cfb2cfa5f9cb796ce12	dll	n/a	Quakbot
2023-04-13 17:36:30	d73f338ce8ee1232fc2262f4e1c36eb2	wsf	n/a	Quakbot