RemcosRAT botnet controller @52.188.19.78

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.

Malware botnet controller located at 52.188.19.78 on port 2404 TCP:
$ telnet 52.188.19.78 2404
Trying 52.188.19.78…
Connected to 52.188.19.78.
Escape character is ‘^]’

Other malicious domain names hosted on this IP address:
dynasty1.ddns.net 52.188.19.78
liquor01.ddns.net 52.188.19.78

Referencing malware samples:
MD5 1c2a50320b0b3ea581a7fb7e14108d8d
MD5 437f82e57e442f34c7b8c15af51e1fd2
MD5 65bae03baa102ea034e1fbe375b7f168
MD5 cdd7cb8a14f53d014281dcce5d90f281
MD5 cfb817a8047edd31624d674686f0c7aa

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *