Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 162.243.96.221 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:162.243.96.221
Hostname:yeti.eternalis.com
AS number:AS14061
AS name:DIGITALOCEAN-ASN
Country:- US
First seen:2021-07-21 21:26:57 UTC
Last online:2021-07-22 14:xx:xx UTC
Malware:Dridex

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusLast online (UTC)
2021-07-21 21:26:57162.243.96.2218194
Dridex
Offline
2021-07-22 14:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 162.243.96.221. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-07-30 18:39:084d8a4885611995f122178177e4a0ef30Executable exeVirustotal results 68.57%
Dridex
2021-07-22 07:55:52a158c8a0fe37bef15764f0c41c1260dcExecutable exeVirustotal results 49.28%
Dridex
2021-07-21 21:09:436b337935938546ea02089268867f48c7Executable exen/a
Dridex
2021-07-21 21:07:31e7c00203bdd9710d9f69eb380be4e0f5Executable exen/a
Dridex
2021-07-21 20:31:25d4ec9da0a9b7b42aed0ecfc17e32c9d9Executable exen/a
Dridex