Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 189.178.44.144 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:189.178.44.144
Hostname:dsl-189-178-44-144-dyn.prod-infinitum.com.mx
AS number:AS8151
AS name:Uninet S.A. de C.V.
Country:- MX
First seen:2022-04-06 13:33:42 UTC
Last online:2022-04-06 14:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse compltain sent?Last online (UTC)
2022-04-06 13:33:42189.178.44.14422
QakBot
Offline
Yes (2022-04-06 13:35:03 UTC)2022-04-06 14:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 189.178.44.144. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2022-04-06 19:50:50c7796954e945ea93c73d26a3030372f1DLL dlln/a
n/a
2022-04-06 16:13:56aea860a2c9b5de2e6a9619affef59ab6DLL dlln/a
n/a
2022-04-06 16:10:091b7f60cd44c6a084aa5144a1a119a5e2DLL dlln/a
n/a
2022-04-06 13:52:3995b854247b62d0bc805de1d38a2d37ddDLL dlln/a
n/a
2022-04-06 13:52:26be944413dc08d943d9a826f8df96f223DLL dlln/a
n/a
2022-04-06 13:52:06173640a202bbfb25185ba0489bde6f1aDLL dlln/a
n/a
2022-04-06 13:15:163f9a967ba01a7cf4efc04c49c70a8476DLL dllVirustotal results 4.41%
n/a
2022-04-06 13:14:250f8f4d754c97f4507f080030a4ea389bDLL dllVirustotal results 4.48%
n/a
2022-04-06 13:10:43d586a82d0083540a98b3285f95c1d94eDLL dllVirustotal results 10.29%
Quakbot
2022-04-06 13:08:5801a35155b27e3daaea2faf37f7d03261DLL dllVirustotal results 4.41%
Quakbot
2022-04-06 11:34:516aaa67af6c73640735f0451021b671deDLL dllVirustotal results 15.15%
Quakbot