Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 185.80.92.160 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	185.80.92.160
Hostname:	mohr-live.de
AS number:	AS45031
AS name:	PROVIDERBOX IPv4 & IPv6 DUS1
Country:	DE
First seen:	2021-05-20 20:36:17 UTC
Last online:	2021-07-05 11:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 185.80.92.160. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2021-07-13 20:14:57	d66b256b08a42579382c84dfb71eabe5	exe	68.12%	Dridex
2021-07-13 19:54:24	302f40182a2aca944c73fa8270c197f6	exe	63.24%	Dridex
2021-07-09 20:01:03	f6b2aa57953d8b14052c12922d7aa5e6	exe	60.87%	Dridex
2021-07-09 19:36:27	8106da857623ce889097fe5f2b1a9453	exe	52.17%	Dridex
2021-07-09 18:35:05	6b053faf54a6537d6fe8a5592abd974a	exe	55.07%	Dridex
2021-06-19 17:58:29	367229f83d0fb34bd8beadf78c6a04e9	exe	68.57%	Dridex
2021-06-15 00:30:19	63974e159b3a86dbd410008ba6960044	exe	68.57%	Dridex
2021-05-26 02:07:40	a53091969954c7b082fc13689995546a	exe	69.57%	Dridex
2021-05-23 19:49:32	a88781edb3503ed9dacc706a8ff9bb24	exe	69.12%	Dridex
2021-05-23 05:41:45	a5eb2c64f11e0917ead3133dde506d67	exe	56.52%	Dridex
2021-05-23 02:36:47	a047f7203ae4ae5778de7ae53cd36411	exe	50.00%	Dridex
2021-05-21 10:49:16	a090abd8d07cbb54b54f58dce71eedf5	exe	66.67%	Dridex
2021-05-20 19:50:57	cc86b436834353764e40646605a88d65	exe	n/a	Dridex
2021-05-20 19:46:55	5c594ef405879ed8a6a85c6e1e50214a	exe	n/a	Dridex
2021-05-20 19:45:05	7043dafa1ead87aa34d76d70cce2e17a	exe	n/a	Dridex
2021-05-20 19:28:11	4d59b8316f57dfbfef0673afdfb28716	exe	n/a	Dridex