Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 78.47.139.43 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	78.47.139.43
Hostname:	ebisu.simplix.ro
AS number:	AS24940
AS name:	HETZNER-AS
Country:	DE
First seen:	2021-01-17 07:49:22 UTC
Last online:	2021-09-08 08:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)	IP address	Port	Malware	Status	Abuse complaint sent?	Last online (UTC)
2021-01-17 07:49:22	78.47.139.43	4443	Dridex	Offline	No	2021-09-08 08:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 78.47.139.43. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2020-11-17 15:38:29	d05f75fe7219a64d04871dbf1d9f5b00	dll	n/a	Dridex
2020-11-17 15:25:00	6b03b4f17be0138c0dbced5e40976ea5	dll	n/a	Dridex
2020-11-13 06:31:26	a4d814e9e97b93f5882a930d290a04e3	exe	18.57%	Dridex
2020-11-12 17:27:24	2b30b2bf8b20ef4f44ac2cf7ebeff137	dll	11.27%	Dridex
2020-11-12 17:22:36	e37359d91671254478a895d62011e9c4	doc	n/a	Dridex
2020-11-12 15:56:52	2eb6f6ca25507f8f9fce5b724d80800d	dll	23.44%	Dridex
2020-11-12 12:19:43	ee69629c63e45daebdd031f840562b34	dll	24.29%	Dridex
2020-11-11 14:58:34	cb19fe63b301713587e7bdddec6a50f7	dll	7.04%	Dridex
2020-11-11 14:40:30	c151c22bf1425d8adfa4313ee1f2387c	dll	11.43%	Dridex
2020-11-11 13:47:44	e696a3e6497ced315b344d6ab1aa6c5f	xls	32.81%	Dridex