Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 47.103.145.214 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:47.103.145.214
Hostname:n/a
AS number:AS37963
AS name:CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.,Ltd.
Country:- CN
First seen:2021-02-26 04:34:35 UTC
Last online:2021-02-27 07:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse complaint sent?Last online (UTC)
2021-02-26 04:34:3547.103.145.214443
Dridex
Offline
No2021-02-27 07:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 47.103.145.214. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-04-09 21:44:10f3f5ba23c5a9bd6deaae14c189cf004cExecutable exeVirustotal results 62.69%
Dridex
2021-04-09 06:37:478a726b2381c0d842eeaf98a16e798015Executable exeVirustotal results 60.56%
Dridex
2021-03-13 20:36:51a0ead9512a1b2ff43e25d805ab89bdd4Executable exeVirustotal results 62.32%
Dridex
2021-02-28 22:42:38ac0fee2e1f3ed6ea555ad1e35066bb35Executable exeVirustotal results 61.43%
Dridex
2021-02-26 19:32:133cf22c8179d9bbe58f1cbe5a99583510Executable exen/a
Dridex
2021-02-25 13:32:223465de66118238fabbc13d820a2d1edeExecutable exen/a
n/a
2021-02-25 13:29:35b293c7d3bc568aabf532850a35fe2c93Executable exen/a
Dridex
2021-02-25 13:08:559309fb64586c89411fe08195ee8601a5Executable exen/a
Dridex