Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 39.121.226.109 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:39.121.226.109
Hostname:n/a
AS number:AS9318
AS name:SKB-AS SK Broadband Co Ltd
Country:- KR
First seen:2022-09-26 18:01:29 UTC
Last online:2022-10-01 06:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse complaint sent?Last online (UTC)
2022-09-26 18:01:2939.121.226.109443
QakBot
Offline
Yes (2022-09-26 18:05:04 UTC)2022-10-01 06:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 39.121.226.109. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2022-10-02 08:14:32ce3f0976857fc0d156ba6dd0a556bd09DLL dllVirustotal results 69.01%
Quakbot
2022-09-28 04:27:35e161560ca8671e85c534f25adb244a27zipn/a
n/a
2022-09-26 15:24:486d0d7e50918d6e7a30340223ed87292bisoVirustotal results 15.00%
Quakbot
2022-09-26 12:41:01e17ff4c8e0da566b6fbe6ce54101eee7DLL dllVirustotal results 28.17%
Quakbot
2022-09-26 12:40:4382001bafafda8b2ed449a35ea73b1d97ison/a
Quakbot