Browse Botnet C&Cs

You are currently viewing the database entry for the TrickBot botnet command&control server (C&C) 185.63.191.109. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:185.63.191.109
Hostname:pribas.ha
Status:Offline
Spamhaus SBL:Not listed
Malware:TrickBot
AS number:AS29182
AS name:THEFIRST-AS
Country:- RU
First seen:2019-12-28 15:57:11 UTC
Last seen:2020-01-08 09:00:47 UTC
Last online:2020-01-09

Malware Samples


The table below documents all malware samples associated with this TrickBot botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-01-09 15:38:373c235d3d36bab60ed58b1fae906d96can/a185.63.191.109447TrickBot
2020-01-09 13:53:400bc204598d1681660231d26a24bb2096n/a185.63.191.109447TrickBot
2020-01-09 13:46:4684f9ee81d52cd79e29dc22e66ec15811n/a185.63.191.109447TrickBot
2020-01-08 13:19:10f8fb85e31bd9876c170cbb2598c28054Virustotal results 34 / 73 (46.58%) 185.63.191.109447TrickBot
2020-01-08 12:56:33bde49ebd0a4f8013ac12ad21b334d4d3Virustotal results 33 / 72 (45.83%) 185.63.191.109447TrickBot
2020-01-06 22:08:09a189a240f7afbbebb40cb94e5d32d65cVirustotal results 30 / 72 (41.67%) 185.63.191.109447TrickBot
2020-01-06 11:48:15af240f0e564c405770e78c5a1cb592f7Virustotal results 33 / 71 (46.48%) 185.63.191.109447TrickBot
2020-01-05 22:41:53a3a633c1145c478f273e8bce40c76562Virustotal results 35 / 72 (48.61%) 185.63.191.109447TrickBot
2020-01-03 23:16:23485e3427411c9aa61fd898670fc5b94en/a185.63.191.109447TrickBot
2019-12-30 18:18:389d1f0c412d1e508228b321caaa19c5dfn/a185.63.191.109447TrickBot
2019-12-30 17:54:4772e63baa63db5d65d0d2e8bab4090debn/a185.63.191.109447TrickBot
2019-12-30 17:30:17edba4de81b23bfd8e9c9a9d081dceadfn/a185.63.191.109447TrickBot
2019-12-30 15:28:41553633039ff33f5c81879f2501be7cecVirustotal results 29 / 71 (40.85%) 185.63.191.109447TrickBot
2019-12-28 16:16:3360183fb25b6c5e7bebff8e39af6513b0n/a185.63.191.109447TrickBot

# of malware samples: 14