Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 95.140.127.82 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:95.140.127.82
Hostname:free-127-82.mediaworksit.net
AS number:AS9125
AS name:ORIONTELEKOM-AS
Country:- RS
First seen:2021-03-20 00:25:18 UTC
Last online:2021-03-20 12:xx:xx UTC
Malware:TrickBot

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusLast online (UTC)
2021-03-20 00:25:1895.140.127.82447
TrickBot
Offline
2021-03-20 12:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 95.140.127.82. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-03-28 10:00:44e0b8b7a19f609211bdeb3c260d7ad71bExecutable exen/a
n/a
2021-03-25 00:43:437d0da8d0bb5c8b3223b587cc427a3ccaWord file xlsmn/a
TrickBot
2021-03-24 23:53:43584789b9de35f86e5e98c52d7e993b9fWord file xlsmn/a
TrickBot
2021-03-24 22:51:3850dde989593c70d3ba22c73d3dd6e0deWord file xlsmn/a
TrickBot
2021-03-19 20:16:1465533238648bc8fd7c8f87656be83319Executable exeVirustotal results 39.44%
TrickBot