Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 109.104.92.237 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:109.104.92.237
Hostname:lvps109-104-92-237.vps.webfusion.co.uk
AS number:AS20738
AS name:GD-EMEA-DC-LD5
Country:- GB
First seen:2021-07-21 21:26:57 UTC
Last online:2021-08-05 10:xx:xx UTC
Malware:Dridex

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusLast online (UTC)
2021-07-21 21:26:57109.104.92.23710172
Dridex
Online
2021-08-05 10:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 109.104.92.237. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-07-30 18:39:084d8a4885611995f122178177e4a0ef30Executable exeVirustotal results 68.57%
Dridex
2021-07-30 18:36:12191324825e6be90612f45d6dab1fb224Executable exeVirustotal results 63.77%
Dridex
2021-07-28 18:42:03d5d13cc88812c2a5d8bfa5047481515bExecutable exen/a
Dridex
2021-07-22 07:55:52a158c8a0fe37bef15764f0c41c1260dcExecutable exeVirustotal results 49.28%
Dridex
2021-07-21 21:09:436b337935938546ea02089268867f48c7Executable exen/a
Dridex
2021-07-21 21:07:31e7c00203bdd9710d9f69eb380be4e0f5Executable exen/a
Dridex
2021-07-21 20:43:17d1a5368e8738c234fe2aa87743c659e0Executable exen/a
Dridex
2021-07-21 20:31:25d4ec9da0a9b7b42aed0ecfc17e32c9d9Executable exen/a
Dridex