Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

Spamhaus SBL:SBL427398
Malware:Heodo -
AS number:AS4837
AS name:CHINA169-BACKBONE CHINA UNICOM China169 Backbone
Country:- CN
First seen:2018-12-19 09:47:10 UTC
Last seen:2018-12-20 15:44:54 UTC

Malware Samples

The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2018-12-21 08:43:28a849c60eb2e9eddbc540fe0bd17a8545Virustotal results 36/59 (61.02%)
2018-12-21 07:24:09f9fcb23a461c14adb0d2eb08913b212cVirustotal results 37/60 (61.67%)
2018-12-21 07:09:3189441a581462de041bb75be2d5825698Virustotal results 36/60 (60.00%)
2018-12-21 07:01:4179a0bfeb0ded0cf8fdb906e7a9b94b16Virustotal results 37/60 (61.67%)
2018-12-21 06:42:3833dbff0792c4d4ed4e930b1780fef34dVirustotal results 15/59 (25.42%)

# of malware samples: 5