Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 195.234.101.236 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	195.234.101.236
Hostname:	web.anw.at
AS number:	AS41363
AS name:	ALPHANETWORK-AS
Country:	AT
First seen:	2021-08-22 00:26:08 UTC
Last online:	2021-09-02 23:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 195.234.101.236. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2021-08-30 22:37:52	21cf55e1e53792543326d03e02e2340a	exe	61.76%	Dridex
2021-08-30 22:01:59	8d9768ba675692689a1e2f2fc4d9e3f6	exe	63.24%	Dridex
2021-08-29 02:45:27	0da9b977eac8b0d6ca0e65485cef06fa	exe	63.77%	Dridex
2021-08-28 22:45:30	2aabec9b5a01f820de7539b9e430f92f	exe	72.06%	Dridex
2021-08-28 21:11:39	69f78acc4049bdfd3df26262f8ee9469	exe	64.71%	Dridex
2021-08-27 19:21:02	9f5f60dd6e53960653614c445d56723a	exe	63.77%	Dridex
2021-08-27 19:15:32	cc191088fb0224c199a8a8fd2b9617fb	exe	n/a	Dridex
2021-08-27 18:51:10	a26b60d96fd633246b9e645682624dff	exe	n/a	n/a
2021-08-27 00:28:46	ab829cf5d206b163107ecf9966dd9886	exe	61.90%	Dridex
2021-08-26 17:23:26	d4421b154008558fba403e4f7c8f594e	exe	65.22%	Dridex
2021-08-22 06:39:20	a0a0668627b3b6b8e2e220defde8afdf	exe	57.35%	Dridex
2021-08-21 22:05:40	309b3bd5bb488856fa054cea7283826e	exe	64.71%	Dridex
2021-08-21 22:04:51	468ce7157b26e65eb5acea2fdac5f25f	exe	52.24%	Dridex
2021-08-21 21:49:36	eb182c540ada7659e1ca01fa2024d85d	exe	52.17%	Dridex
2021-08-21 21:30:47	3a8578ffbab9f84b27d4bc5fb2b594e3	exe	62.32%	Dridex