Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 186.64.67.38 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	186.64.67.38
Hostname:	host38.186-64-67.nodosud.com.ar
AS number:	AS27953
AS name:	NODOSUD S.A
Country:	AR
First seen:	2022-04-12 14:22:23 UTC
Last online:	2022-04-13 11:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 186.64.67.38. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2022-04-23 06:27:04	f30e15298332b69704f00158315d1ffc	dll	n/a	Quakbot
2022-04-19 05:42:06	9567988a33789b4efaa23fe6c532f379	dll	57.97%	n/a
2022-04-18 01:15:50	e807f630e26f7f714c74276b27d3cdbc	dll	n/a	n/a
2022-04-18 01:12:07	a78be23cadc6691cff40d9a92b8c1692	dll	n/a	n/a
2022-04-15 16:28:54	8a9347905dc7a332b35a2e680abba535	dll	n/a	n/a
2022-04-14 16:28:10	49d5b1b592428122ea9ee797af0c5baf	dll	21.74%	n/a
2022-04-14 16:18:19	9d0b8d924a2f02f79d18094220e1ad38	msi	14.75%	n/a
2022-04-14 15:13:48	75bf648ffcdf9fef945fb09384dc2be0	dll	23.19%	Quakbot
2022-04-13 11:30:18	0884cfbaa950949b796e7663a33349a2	dll	n/a	n/a
2022-04-13 04:39:20	81b7339827284990d3477681f653349e	msi	33.33%	n/a
2022-04-13 02:51:20	6377e3136505d2618f22adf925dcb33c	dll	28.99%	Quakbot
2022-04-12 17:19:46	726a41b2959768c5c3d2c7c213e6d0d8	dll	26.47%	n/a
2022-04-12 17:08:38	13bd4a09264d6312d957d61d64e79f53	msi	29.51%	n/a
2022-04-12 14:55:35	288d263dc2e6640869ad85b17c797919	dll	n/a	n/a
2022-04-12 13:56:59	022bfba36745f584c87ad97933c7ba5f	msi	22.03%	n/a
2022-04-12 13:31:49	80413378373701da3e295c2448f679f0	dll	n/a	n/a