Browse Botnet C&Cs

You are currently viewing the database entry for the TrickBot botnet command&control server (C&C) 185.224.132.65. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:185.224.132.65
Hostname:durio.hh
Status:Offline
Spamhaus SBL:SBL404594
Malware:TrickBot
AS number:AS204601
AS name:ON-LINE-DATA Server location - Netherlands, Dronten
Country:- NL
First seen:2019-07-17 03:10:06 UTC
Last seen:2019-07-17 03:10:06 UTC
Last online:2019-07-20

Malware Samples


The table below documents all malware samples associated with this TrickBot botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-07-22 10:15:481299301f650314ee6d183962a212d03aVirustotal results 42/72 (58.33%) 185.224.132.65443TrickBot
2019-07-20 06:31:176749d2de10e518da035d8bae67bf4405Virustotal results 38/69 (55.07%) 185.224.132.65443TrickBot
2019-07-20 06:31:176749d2de10e518da035d8bae67bf4405Virustotal results 38/69 (55.07%) 185.224.132.65443TrickBot
2019-07-20 06:31:176749d2de10e518da035d8bae67bf4405Virustotal results 38/69 (55.07%) 185.224.132.65443TrickBot
2019-07-20 06:31:176749d2de10e518da035d8bae67bf4405Virustotal results 38/69 (55.07%) 185.224.132.65443TrickBot
2019-07-20 06:31:176749d2de10e518da035d8bae67bf4405Virustotal results 38/69 (55.07%) 185.224.132.65443TrickBot
2019-07-20 06:31:176749d2de10e518da035d8bae67bf4405Virustotal results 38/69 (55.07%) 185.224.132.65443TrickBot
2018-10-19 12:53:50317e9868dc42aaa7da2e98bbc9ee8288Virustotal results 11/65 (16.92%) 185.224.132.65443

# of malware samples: 8