Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 5.54.50.169 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:5.54.50.169
Hostname:ppp005054050169.access.hol.gr
AS number:AS3329
AS name:HOL-GR Athens, Greece
Country:- GR
First seen:2022-04-14 15:31:25 UTC
Last online:2022-04-18 19:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse compltain sent?Last online (UTC)
2022-04-14 15:31:255.54.50.169995
QakBot
Offline
Yes (2022-04-14 15:35:05 UTC)2022-04-18 19:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 5.54.50.169. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2022-04-19 09:23:575c02722f52a4e451176fe1887883983cDLL dlln/a
n/a
2022-04-19 02:22:47fe61080715e97b623082d86305828bd2DLL dllVirustotal results 10.14%
n/a
2022-04-18 21:16:010abd8a9bf1f0569568be943247941e60DLL dlln/a
n/a
2022-04-18 21:15:14527b8c21310724b075d741bb22137936DLL dlln/a
n/a
2022-04-18 17:55:4909f71e7d509184ef6babe6a2463f7bfdDLL dlln/a
n/a
2022-04-18 16:41:47c867e2db5895d61bc1eedcc4bca8eac6DLL dlln/a
n/a
2022-04-18 16:41:345cbda1468e0679bf46f3494ff5a248efDLL dlln/a
n/a
2022-04-18 16:41:214b16bd9c1043af55800ba004e2deaa61DLL dlln/a
n/a
2022-04-18 15:27:37ce10f105e84ee24e97dccfaea62bc580DLL dlln/a
n/a
2022-04-18 14:52:2204f35d0fa4fb11681b46fa7880eeccaeDLL dlln/a
n/a
2022-04-14 16:28:1049d5b1b592428122ea9ee797af0c5bafDLL dllVirustotal results 21.74%
n/a
2022-04-14 16:18:199d0b8d924a2f02f79d18094220e1ad38msiVirustotal results 14.75%
n/a
2022-04-14 15:13:4875bf648ffcdf9fef945fb09384dc2be0DLL dllVirustotal results 23.19%
Quakbot