Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 113.28.253.9 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	113.28.253.9
Hostname:	113-28-253-9.static.imsbiz.com
AS number:	AS4760
AS name:	HKTIMS-AP HKT Limited
Country:	HK
First seen:	2022-01-26 01:27:54 UTC
Last online:	2022-02-11 10:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 113.28.253.9. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2022-02-17 13:48:06	199f4ccbafda8a6991558e8d8cea52b1	dll	n/a	n/a
2022-02-17 13:47:17	b2bfda83034e98d3680be319edd08574	dll	n/a	n/a
2022-02-16 22:50:54	ae8b97c558f47a0f1a69deb506997cc3	dll	n/a	n/a
2022-02-16 17:05:10	67385cc256ea2b0298937cde32849225	dll	n/a	n/a
2022-02-16 15:54:31	306dd7e7c3e0ac3d079ffc491199e5d0	dll	n/a	n/a
2022-02-16 14:40:33	8bf0cbffa575244b0c1a8f54ec129251	dll	n/a	n/a
2022-02-16 14:04:43	4778e8fce3360f7a7ac43e0cd6145797	dll	10.29%	n/a
2022-02-16 13:30:30	632cc7523a107db992e19955b2650862	dll	n/a	n/a
2022-02-15 17:41:13	e6f6a25393637f26ab87ea869bfad966	dll	n/a	n/a
2022-02-15 17:41:08	b9c56868337cbcec02a779d2d5f63d6f	dll	n/a	n/a
2022-02-15 17:40:55	2d052c998853edd6186279ee1c96c412	dll	32.84%	n/a
2022-02-15 17:18:56	e62a1fb895ad2be48c1221a561b249f5	dll	n/a	Quakbot
2022-02-15 16:26:43	32e0d809c346c7e586cc728ef95ced4e	dll	n/a	n/a
2022-02-15 16:08:42	4dd9f83b4a268cb97289c4cbc130719b	dll	n/a	n/a
2022-02-15 14:52:30	5508b01862cd1f328f92f66656025b5f	dll	13.43%	n/a
2022-02-15 13:57:06	74dba1f6575d91c4ac601f9d117c13fe	dll	n/a	n/a
2022-02-15 13:13:30	070d9a3ff54f12d073251d39fc04fea7	dll	n/a	n/a
2022-02-15 13:12:12	ea69f15614a74d40507da78f384e6a26	dll	n/a	n/a
2022-02-15 06:03:56	f0ed5abd066e73fbb0383ea70d1674d4	dll	24.64%	n/a
2022-02-15 06:01:05	17d4dddc3fee3825f5d0b34633339a51	dll	20.90%	n/a
2022-02-15 06:00:58	d15cda202bf6701daf0d4407de0722a2	dll	20.59%	n/a
2022-02-15 06:00:51	b569f4d9fdf086d4e8c613d932d8ea10	dll	20.59%	n/a
2022-02-14 17:14:25	775c5d7c669b04a24ac9eeb8e58dd382	dll	n/a	n/a
2022-01-25 15:41:30	2cfb693ef8bc07df3067892daedf5cf9	dll	n/a	Quakbot