Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 139.5.239.14 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	139.5.239.14
Hostname:	n/a
AS number:	AS136334
AS name:	VNPL-AS Vortex Netsol Private Limited
Country:	IN
First seen:	2022-11-04 06:17:32 UTC
Last online:	2023-03-18 08:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 139.5.239.14. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2023-03-16 17:50:32	7555576d5752d18e33dba37be01669cd	xll	33.33%	n/a
2023-03-15 02:37:17	16fbffe8e8da6f6ee2e8ca5fa73b7d1e	xll	n/a	n/a
2023-03-14 17:34:44	ff58f9cf0740aead678d9e36c0782894	dll	14.49%	n/a
2023-03-14 17:28:23	e09a3bac10565ee80cbdb7a4b1a5d2af	xll	11.59%	n/a
2023-03-14 17:16:56	35825efb8c006f5a369710852b11230b	dll	11.59%	n/a
2022-12-15 14:51:59	dfdfd1f1f8031cdfe64cad02a265a470	dll	33.33%	Quakbot
2022-12-15 14:48:26	810b8f3fa49b99a58bd92668d389716e	dll	40.58%	Quakbot
2022-12-13 09:31:24	c5a31070a1b52fb7bcd076a2805c020b	zip	n/a	n/a
2022-12-10 12:49:19	3c359f052ab36b9a2dc3c295065a18a0	dll	32.39%	n/a
2022-12-10 12:49:11	077f68ac69181ee01e55594ecc5fba91	zip	n/a	Quakbot
2022-11-04 11:51:50	e7eb785bdb9b7ebfe4c17caeb04fbb43	dll	n/a	Quakbot
2022-11-04 11:51:41	7f4809f62a4d2f2f47b3cc23aab33def	iso	n/a	Quakbot
2022-11-04 11:51:32	6a910c96a79ccfe787fbd16695aba519	zip	3.12%	Quakbot
2022-11-04 11:50:39	92b4aed4b0319b14861728a2d3e96ba3	zip	n/a	Quakbot