Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 124.149.143.189 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	124.149.143.189
Hostname:	n/a
AS number:	AS7545
AS name:	TPG-INTERNET-AP TPG Telecom Limited
Country:	AU
First seen:	2023-04-13 20:22:16 UTC
Last online:	2023-05-31 19:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 124.149.143.189. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2023-05-30 20:45:59	ab8ef3423324168d06b2d122f75ca130	msi	3.77%	n/a
2023-05-30 20:45:54	e35727b10193fe55df216a1f9d166997	msi	5.00%	n/a
2023-05-30 15:54:44	665afc8f8b7972f427fe1bd90d263032	msi	n/a	n/a
2023-05-26 22:42:14	37f56794fcc202b0568d6005de64fe12	js	6.78%	n/a
2023-05-26 20:38:52	84f60d908dc7e65d585d1f1e51a1c211	msi	3.33%	n/a
2023-04-20 16:28:32	45f241fd144ec617a7610cb4edc51f30	dll	21.31%	n/a
2023-04-14 07:24:03	508634d73502cd017fa7fb651e64e9d2	dll	n/a	Quakbot
2023-04-14 06:01:48	e3e12195c2830bd8710488fce759bb0a	dll	n/a	Quakbot
2023-04-14 04:16:05	237412f505f16121d6a68786de3f08f7	dll	n/a	Quakbot
2023-04-14 01:08:53	9f22448b60892d9394c4f6d8968d38ca	wsf	n/a	Quakbot
2023-04-13 23:07:20	d5fada41603990f9f853be792ccb554e	wsf	n/a	Quakbot
2023-04-13 20:27:09	965ad4675c00c0ab06edceb3da7deb90	dll	n/a	Quakbot