Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 187.58.245.168 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:187.58.245.168
Hostname:187.58.245.168.static.host.gvt.net.br
AS number:AS18881
AS name:TELEFONICA BRASIL S.A
Country:- BR
First seen:2022-03-29 12:33:03 UTC
Last online:2022-03-30 17:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse compltain sent?Last online (UTC)
2022-03-29 12:33:03187.58.245.168443
QakBot
Offline
Yes (2022-03-29 12:35:05 UTC)2022-03-30 17:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 187.58.245.168. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2022-04-01 06:03:41e612796dd17f8aca09f19c7ea50c07f8DLL dlln/a
n/a
2022-03-31 12:58:357f09fc153f1882297f106ed49b72c4eaDLL dlln/a
n/a
2022-03-30 16:40:310548dea76a304a4cf185f7048a5d000fDLL dllVirustotal results 10.29%
n/a
2022-03-30 10:01:28eccd8b08bb2305889b06f97ec63b5b7fDLL dlln/a
n/a
2022-03-30 08:39:37aaa9fdc8a3064a28864c28698bbf062bDLL dlln/a
n/a
2022-03-29 11:42:55e7e8ac96d80fb4ce97a5e57a9e7f49ddDLL dllVirustotal results 18.18%
n/a