Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 62.209.206.195 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	62.209.206.195
Hostname:	n/a
AS number:	AS5588
AS name:	GTSCE GTS Central Europe / Antel Germany
Country:	CZ
First seen:	2021-03-24 07:35:52 UTC
Last online:	2021-03-29 16:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)	IP address	Port	Malware	Status	Abuse complaint sent?	Last online (UTC)
2021-03-24 07:35:52	62.209.206.195	447	TrickBot	Offline	No	2021-03-29 16:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 62.209.206.195. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2021-03-30 01:50:20	a42c27e306b715a310509231fe51d7db	xls	n/a	TrickBot
2021-03-29 20:05:07	ecabd7409907f24a29769be05bfbd20f	xls	n/a	TrickBot
2021-03-28 10:04:22	d39029b0a73f7f9a8a67b925655372a9	exe	n/a	TrickBot
2021-03-28 10:03:56	e62297579014cead41da8d90471dca7b	exe	n/a	TrickBot
2021-03-28 10:02:41	e1955d6f1020ad858cca38eec17e8faa	exe	n/a	TrickBot
2021-03-28 07:22:35	c0f9948f638fe4c6fe6e49e64aaa8cd3	exe	n/a	n/a
2021-03-28 07:08:53	3108dc49109fb8d710f8bd8fcacfec3b	exe	n/a	TrickBot
2021-03-25 00:27:56	968dd6095b3503518d013e3d0649b316	xlsm	n/a	TrickBot
2021-03-25 00:27:49	4d84c3129f5fe4a6fe514a01e5ab71d5	xlsm	n/a	TrickBot
2021-03-25 00:08:27	5a2988170904f52a0095814ec6a366bc	xlsm	n/a	TrickBot
2021-03-24 23:47:37	f6905fffdb341a28c66838de1bd0409b	xlsm	n/a	TrickBot
2021-03-24 23:46:34	e550fd4c1d6075fcfadd6df6f7a8877c	xlsm	n/a	TrickBot
2021-03-24 22:56:47	adb5eeb9f2e658327ea65433270bd719	xlsm	n/a	TrickBot
2021-03-24 06:55:58	8bb9c06dafe9b3a787cf7f8020d6754a	exe	n/a	TrickBot