Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 43.245.216.238 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:43.245.216.238
Hostname:n/a
AS number:AS24492
AS name:IIT-WICAM-AS-AP WiCAM Corporation Ltd.
Country:- KH
First seen:2021-01-18 09:38:19 UTC
Last online:2021-03-29 00:xx:xx UTC
Malware:TrickBot

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusLast online (UTC)
2021-01-18 09:38:1943.245.216.238447
TrickBot
Offline
2021-03-29 00:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 43.245.216.238. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-02-15 20:04:1944669e0ff064dfc9e724391003dcde87DLL dlln/a
TrickBot
2021-02-10 20:17:597c7469bec4d4545ca49fd0dcfd671fb6Executable exeVirustotal results 74.65%
TrickBot
2021-01-27 22:12:3311a1261ce23df4b06d16b22327471eaaExecutable exeVirustotal results 72.86%
TrickBot
2021-01-20 00:50:50643357a20f7d41de40a07e72075d5e1aWord file xlsmn/a
TrickBot
2021-01-11 21:04:00961e3f6d0f070376cbc09ee67d3c135bExecutable exen/a
TrickBot
2021-01-06 05:34:0954444eff7df64392d57058f2c5c05eb9Executable exen/a
TrickBot