Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 104.36.167.47 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	104.36.167.47
Hostname:	mail.davida.com.ec
AS number:	AS27640
AS name:	GIGASNET-AS
Country:	US
First seen:	2021-12-13 17:13:52 UTC
Last online:	2022-03-22 13:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 104.36.167.47. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2021-12-26 16:15:29	47c59530065e8e7e05a855879bf8a922	dll	64.71%	Dridex
2021-12-26 16:15:23	0d9cc367aa4abc5620b6fcf8e9272f53	dll	63.24%	Dridex
2021-12-26 16:08:15	8337dd22aa86bc357f8bc573441a97c7	dll	64.18%	Dridex
2021-12-22 15:27:57	0b7cdcbfe986f4542ebc4bf1cb8fef0f	dll	58.82%	Dridex
2021-12-22 15:12:54	cc629318af63c61b89e0047c3799b3b5	dll	57.14%	Dridex
2021-12-22 06:24:39	153c98b351ba1f82f552d663addacb46	dll	n/a	n/a
2021-12-20 16:15:12	77cf44a3d9efbf1d4b3a92c44d990efb	dll	54.55%	Dridex
2021-12-20 16:15:02	ff7fc9db939b7059ba7e917a5854f3e8	dll	59.70%	Dridex
2021-12-15 22:22:47	6f12d78d46043dc63d825a1999869c8c	dll	54.41%	n/a
2021-12-15 22:22:31	c56a647c34d53d84c58282359f4a633b	dll	54.10%	n/a
2021-12-14 21:42:15	b83ea60088769df396e8483893994c77	dll	24.07%	n/a
2021-12-14 21:35:27	5ac883c6437240f50428e6b7392e6049	dll	25.76%	n/a
2021-12-14 21:35:18	5d91f693ae62123730e9b2df722f0653	dll	25.76%	n/a
2021-12-14 20:19:45	c8ee1f4c03948d9bfc7f15f2c3915b20	dll	23.08%	n/a
2021-12-14 20:13:57	8d3033b8b36435b948975fc3d91ee5e1	dll	25.37%	n/a
2021-12-14 01:35:24	8451f4ecac4db821aabb43f83078e596	dll	25.00%	n/a
2021-12-14 01:35:23	c8aac7332b8caed8d762ac7790c8849a	dll	29.41%	n/a
2021-12-13 22:20:49	04459ef99e8cca019d3676bd52707e3a	dll	25.00%	n/a
2021-12-13 22:04:38	f467f479d31f99b0e986535ab6fedad2	dll	26.47%	n/a
2021-12-13 21:57:56	e141d2e1c89da0b36625a8b610ebc4a4	dll	28.36%	n/a
2021-12-13 21:57:50	7e13728a352528d876f1037a4f97a928	dll	27.94%	n/a
2021-12-13 21:57:45	e8425731d24430d3eb25182dfc18200a	dll	28.36%	n/a
2021-12-13 21:57:37	3e2881e591904f85336d7e37f781f7c2	dll	27.94%	n/a
2021-12-13 21:00:38	459c713901e0429ec2617f224df949df	dll	26.47%	n/a
2021-12-13 21:00:30	fe76c8fbaae02426f2b1adf605c971e1	dll	23.88%	n/a
2021-12-13 20:26:16	429db8693d90fb67bcb897578c035e36	dll	23.53%	n/a
2021-12-13 20:18:51	51073366764aeecfa7d52f5b0461f180	dll	25.37%	n/a
2021-12-13 20:18:33	351e97991ea2f7d9e24c594776c11d6c	dll	25.00%	n/a
2021-12-13 19:18:40	7c4dba81eccea65acca159ea7c730dab	dll	21.21%	Dridex
2021-12-13 19:13:24	5f28287ae8335d9b5d7312c84aebfb00	dll	22.39%	Dridex
2021-12-13 19:13:10	8b22323e8a0b8bf647766c2343edc45b	dll	22.58%	n/a
2021-12-13 17:43:00	ef005c5da8910c60fceaaa3a5b62e470	dll	26.15%	Dridex
2021-12-13 17:42:54	2f7ff91c2bff52dc9bc878f46d059b91	dll	21.21%	Dridex
2021-12-13 17:42:45	6da0cae03023a10e31d7fb0a5d678723	dll	21.21%	Dridex