Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 49.245.82.178 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	49.245.82.178
Hostname:	178.82.245.49.unknown.m1.com.sg
AS number:	AS4773
AS name:	MOBILEONELTD-AS-AP MobileOne Ltd. MobileInternet Service Provider Singapore
Country:	SG
First seen:	2023-02-20 12:02:55 UTC
Last online:	2023-03-19 13:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)	IP address	Port	Malware	Status	Abuse complaint sent?	Last online (UTC)
2023-02-20 12:02:55	49.245.82.178	2222	QakBot	Offline	Yes (2023-02-20 12:05:06 UTC)	2023-03-19 13:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 49.245.82.178. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2023-03-16 17:50:32	7555576d5752d18e33dba37be01669cd	xll	33.33%	n/a
2023-03-15 15:41:38	67ead5069eca24d3705c4bf7811f9558	js	n/a	n/a
2023-03-15 12:06:25	709e034c433dd371d3bb96d80b67a789	dll	n/a	n/a
2023-03-15 02:37:17	16fbffe8e8da6f6ee2e8ca5fa73b7d1e	xll	n/a	n/a
2023-03-14 17:34:44	ff58f9cf0740aead678d9e36c0782894	dll	14.49%	n/a
2023-03-14 17:28:23	e09a3bac10565ee80cbdb7a4b1a5d2af	xll	11.59%	n/a
2023-03-14 17:16:56	35825efb8c006f5a369710852b11230b	dll	11.59%	n/a
2023-03-10 00:01:22	2bd110d17002ecc13814cfd2fc4cd939	dll	27.94%	n/a
2023-03-09 14:39:22	f685c47ebacb5ea1d9a4de01713260a1	dll	n/a	n/a
2023-03-09 12:16:52	28da37af50153bee403dc5d3f04a3721	dll	17.39%	Quakbot
2023-02-22 17:49:27	d4006bece2a7933ca9bef826b85e17bb	zip	n/a	n/a